A BZ Media Publication 



SOFTWARE DEVELOPMENT 








The Industry Newspaper for Software Development Managers 




SPECIAL REPORT 

The movement 

promotes databases 

that aren't meant to 

replace SQL, but 

to complement it 



page 27 



JULY 15, 2010 • ISSUE NO. 250 



www.sdtimes.com • $9.95 



Flash or HTML5? 
It depends on the user 

Before Ul decisions are made, experts 
say it's critical to understand needs 



BY DAVID RUBINSTEIN 

If you're creating software with- 
out a mobile consideration — such 
as for intranet portals or content- 
heavy, browser-based applica- 
tions — Flash would be the best 
technology for the user interface. 
If accessibility from mobile 
devices is a requirement, HTML5 
might be the better choice. 

These are the observations of 
Anthony Franco, president and 
cofounder of the consulting com- 
pany Effective UI, who said it's 
becoming more critical than ever 



for people executing on the 
application's front-end design to 
understand the needs of the user. 
However, the conversation is 
made more complex by Apple's 
refusal to allow the Flash runtime 
onto its iPhone and iPad devices. 
In an open letter posted to the 
Apple website in April, Jobs 
explained that Flash technology is 
not only proprietary, but claimed 
that it's also old technology that 
uses too many resources and 
crashes too often. Adobe, of 
continued on page 20 ► 



Right on time: The 
Eclipse Helios train 

Features new Linux IDE and 
new JavaScript package 




Eclipse's Mike Milinkovich says that 
Oracle has not altered Java's path. 



BY DAVID RUBINSTEIN 

The Helios release train has left 
the Eclipse station right on time, 
carrying cargo that includes new 
packages of tools and a market- 
place client to provide an "app 
store" experience for developers. 
A new Linux IDE package 
makes the experience easier for 
developers creating C and C+ + 
applications, as it takes work out of 
the command line, said Eclipse 
Foundation executive director 
Mike Milinkovich. The foundation 



pointed to data from its new com- 
munity survey that showed Linux 
is increasingly the platform of 
choice for its developers. 

Meanwhile, a new JavaScript 
package is designed to make 
Web application development 
simpler. Milinkovich said the 
effort is looking to repeat the 
success of the PHP package. 

The new Eclipse Marketplace 

offers a mix of open-source and 

commercial downloads. Milin- 

continued on page 22 ► 
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Steps to reducing vulnerabilities 

Team mentality, cohesion highlighted in report 



BY KATIE SERIGNESE 

Automation, authentication and 
research are only a few aspects for 
reducing software vulnerabilities. 
A team mentality and cohesion 
across the software supply chain 
play a big part as well, according 
to a report released June 14 by 
vendor consortium Software 
Assurance Forum for Excellence 
in Code (SAFECode). 

The report, "An Overview of 
Software Integrity Controls: An 
Assurance-Based Approach to 
Minimizing Risks in the Soft- 



ware Supply Chain," discusses 
approaches organizations can take 
for complete software integrity, 
such as contractual, technical and 
authenticity controls. 

Bola Rotibi, research director 
at Creative Intellectual Consult- 
ing, pointed out: "The most 
important thing is not a tool or a 
technological approach, although 
these things are vital. It's really 
more about an attitude, aware- 
ness and recognition [of a vulner- 
ability] approach that should be 
applied before best practices." 



SAFECode's members 

(Adobe, EMC, Juniper, Micro- 
soft, Nokia, SAP and Symantec) 
naturally agreed with the paper's 
premise, saying, "Focusing on 
the place where software is 
developed is less useful for 
improving security than focusing 
on the process by which software 
is developed and tested." Focus- 
ing on the process helps ensure 
vendors, suppliers and employ- 
ees alike are all on the same 
page, the report said. 

Despite plenty of ways to 



assess and mitigate vulnerabili- 
ties, Rotibi said that, at the end of 
the day, there needs to be a con- 
certed effort to look at where vul- 
nerabilities will happen, to have 
the skills to recognize them, and 
the humility to admit a failure if a 
vulnerability does happen. After- 
wards, that information also 
needs to be documented and 
passed along to ensure the vulner- 
ability will be less likely to happen 
again, she added. 

Other approaches, such as 
automating certain processes and 
reducing the amount of actual 
people touching the code, can 
certainly minimize risks, but this 
approach is not always entirely 
feasible either, said Michael Cote, 
continued on page 24 ► 
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Reducing the complexity of map/reduce 

Startup Karmasphere creates application framework for Hadoop, supports various languages 



BY DAVID WORTHINGTON 

Building applications that run map/ 
reduce jobs shouldn't be rocket science, 
says the founder of a startup company 
that has developed an application devel- 
opment framework for Apache Hadoop. 

Hadoop is an open-source Java-based 
framework that brings methods to large 
volumes of data on disk for map/reduce 
data analysis jobs. It is used by Internet 
search providers, social networking sites 
such as Facebook and Twitter, financial 
service providers, and in Amazons Elastic 
Compute Cloud to process large data sets. 

Karmasphere, a company founded by 
alumni of Aventail and Raytheon Sys- 
tems, released in June three new prod- 
ucts based on its own framework. The 
products are Karmasphere Studio Ana- 
lyst, Karmasphere Studio Professional 
Edition and Karmasphere Client. 

The client sits at the lowest level of 
the Karmasphere framework, and han- 
dles provider interfaces and clusters cre- 
ated with the bigdata open-source com- 
puting fabric solution. Above that layer, 
infrastructure services manage clusters 
and file systems as well as debugging 
applications and reporting. 



Java 



The framework also 
provides language support 
for Cascading, Hive QL, 
Java and Pig, in addition to 
an integrated graphical 
user environment. 

Hadoop was originally 
used by computer scien- 
tists and other "rocket sci- 
entist" developers, said 
Karmasphere founder and 
CEO Martin Hall. 
"Hadoop is great but not 
easy to use." 

Hadoop requires devel- 
opers to understand its file 
system, and there is no API 
compatibility between ver- 
sions and distributions, 
Hall explained. Business users require an 
abstraction from that complexity, and 
analysts want something that looks like 
SQL, he said. 

On the other hand, developers want 
to be able to see what is going on inside 
of a cluster, he said. 

Karmasphere Studio Professional 
Edition provides developers with 
debugging capabilities and visualization 



Integrated Graphical User Environment 



Language Support 
Hive Pig [ Cascading Others 
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(File System Manager, Cluster Manager, Reporting, Debugger) 



Karmasphere Client 

(BigData Connection Manager, Provider Interfaces, etc.) 
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MapReduce HDFS 
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MapReduce HDFS 



Public Cloud 



Public Cloud Services 



The Karmasphere platform adds a layer of abstraction to Hadoop for application 
developers on top of a graphical user environment. 



tools to determine what occurred during 
a job. It also has the ability to export 
Hadoop jobs as binary applications that 
may be run on any supported operating 
system without any third-party software. 
The solutions run on Linux, Mac OS and 
Windows. Alternatively, a developer 
could create a Java API package to be 
used in other applications, said CTO and 
cofounder Ben Mankin. 



Karmasphere Studio 
Analyst enables technical 
analysts to perform ad hoc 
analysis of bigdata hives 
(which are very large clus- 
ters), Mankin said. "It's 
SQL on map/reduce... the 
Holy Grail." 

Differences in distrib- 
utions and versions are 
handled by the SQL 
engine, said Mankin. 
"There's no infrastruc- 
ture, no network tunnels, 
third-party servers, or 
funny error messages." 

A standalone edition 
of Karmasphere Client is 
also available. It is a Java 
library that makes Hadoop applications 
built on top of it more fault-tolerant, and 
it saves bandwidth, Hall said. Event 
monitoring is also provided. 

The company also ships a community 
edition of Karmasphere Studio that runs 
in Eclipse and NetBeans. It does not 
include all of the visualization and 
debugging tools that are found in the 
professional edition. I 



Proposal for IBM to host 
Eclipse project around EGL 



BY KATIE SERIGNESE 

IBM has proposed to establish an 
Eclipse open-source project around its 
Enterprise Generation Language tech- 
nology for modernizing mainframe code. 

The EGL is a higher-level, business- 
oriented programming language within 
IBM's Rational Business Developer 
(RBD) product. It is designed for busi- 
ness application developers to build 
end-to-end solutions in a single language 
that can also be compiled into COBOL, 
Java and JavaScript. 

IBM hopes to start the project in late 
August or early September, after the 
proposal is tweaked and all interested 
parties are added, said Will Smythe, 
product line manager for IBM RBD and 
EGL. The project was announced in 
early June at IBM's Innovate 2010 con- 
ference, held in Orlando. 

This project will give developers access 
to the source code, compiler and genera- 
tors, and extend EGL's technology and 
generators, Smythe said. "We also want to 
open the technology to a whole new 
group of developers who probably would 
not have tried EGL otherwise," he added. 

IBM will also continue to develop the 
technology in combination with partici- 
pants and partners that specialize in 



EGL or UI development, he said. 

According to IBM's proposal, the gen- 
erators provided in the initial contribution 
are not designed for extensibility. IBM 
then said, "We propose to work with the 
community to re-implement the existing 
Java and JavaScript generators on top of 
an extensible framework. Once complet- 
ed, these generators can be extended to 
support new runtime environments, or 
new generators could be created using 
[EGL's] extensible framework." 

Future generators could extend the 
code-generation framework to C/C+ + 
and .NET, and include pluggable exten- 
sion to OSGi-based runtimes. 

This announcement is part of a two- 
stage initiative that was started in early 
2009, Smythe said, calling the most 
recent news the "open stage." The previ- 
ous "free stage" took place last Septem- 
ber when IBM made the EGL tool a 
free community edition. This first stage 
enabled developers to develop, run and 
debug EGL-generated Java and 
JavaScript applications for deployment 
to a dynamic Web project. 

Think of this most recent stage, 
Smythe said, "as taking the EGL com- 
munity tool codebase and open-sourcing 
out in Eclipse." I 
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The Multicore Association has created a Tools Infrastructure Work- 
ing Group, which aims to define a common data format and create 
standards for sharing data across diverse application development 
tools. The Multicore Association is a vendor-neutral consortium pro- 
moting multicore development by both academic institutions and a 
wide range of semiconductor and tools companies. 



, NEW PRODUCTS , 



Developers can now embed IP telephony links into their applications 
and devices using SkypeKit. The kit, currently in a closed beta, will 
support both Linux-based consumer-electronics devices and Mac and 
Windows desktop applications. SkypeKit only includes a set of APIs for 
a variety of popular Skype features, including voice and video calling 
and instant messaging, but also uses the Skype SILK wideband audio 
codec . . . OpenSpan is offering a free Visual Studio plug-in that lets 
developers see how users interact with applications. The OpenSpan 
Plug-In links .NET applications to the company's OpenSpan platform 
. . . Makara is offering a closed beta of Makara Cloud for JBoss, a self- 
service portal for application teams to create development and test 
environments on public or private clouds. The product delivers cloud 
provisioning, elastic scaling, built-in monitoring, stack configuration, 
log aggregation and auditing of all system changes. The final pricing 
will be based on a per-server-hour fee . . . FlyCast is offering an open- 
source library of demonstration mobile apps created with CSS3, 
HTML5 and JavaScript, designed to show how mobile applications can 
be built without Flash. The gallery can be viewed using iPhone, iPad or 
iPod touch devices at appMobi's website. 



UPDATES 



Kentico has updated its content management system for ASP.NET to 
work with Visual Studio 2010 and .NET Framework 4. Kentico CMS 
5.5 integrates with Facebook Connect, OpenID and SharePoint 
Server authentication systems, extending beyond the previous ver- 
sion's integration with Active Directory and Windows Live ID. It also 
integrates with the MetaWeblog API, used by many blog systems 
. . . Version 3.7 of CounterSoft's Gemini project issue management 
system focuses on a new visual project planner designed to help 
agile developers solve GUI visual issues. It also plugs directly into 
Visual Studio 2008 and 2010 with a plug-in, and links to the Git and 
Mercurial source-code control systems . . . Smart Bear Software 
says that its Code Collaborator peer code review software now inte- 
grates directly into IBM Rational's Team Concert workflow manage- 
ment system . . . Easy Projects .NET has updated its eponymous 
Web-based project management and collaboration suite. Easy Pro- 
jects .NET 7.0 improves the user experience with a better Ul and 
contextual menus; displays resource workloads during activity 
assignments; and provides a weekly view grid for time logs. It also 
has better batch operations and makes it easier to change a user's 
role on multiple projects ... EC Software has updated its Help & 
Manual software to deliver source-code documentation from Visual 
Studio. Version 5.4 uses Microsoft Sandcastle (a command-tool) to 
read Visual Studio source code and comments, which can be pub- 
lished into team documentation . . . Froglogic has updated its Sguish 
cross-platform GUI test software to use a new GUI test development 
environment based on Eclipse. Squish 4.0 also supports automated 
GUI testing of native Windows applications based on toolkits such as 
MFC, .NET, PowerBuilder, Visual Basic, Windows Forms and so on. It 
can also do GUI testing of CocoaTouch for iPhone, iPod Nano and 
iPad applications . . . ANTS Performance Profiler 6, from Red Gate, 
adds the ability to instrument a live production ASP.NET website, 
now letting developers profile the site without going offline. Other 
new features include profiling SQL and 10 performance, automated 
profiling via a command-line interface, Silverlight profiling, and com- 
patibility with NET 4.0 .. . Infragistics says that NetAdvantage for 
.NET 2010 Volume 2, its set of Ul development tools and compo- 
nents, includes an ASP.NET toolkit that is fully compatible with Nov- 
ell's Mono framework running on Linux servers. I 



Watts Humphrey 
shares his 
'Reflections 
on Management' 

Former IBM programming director 
talks about handling project team? 

SECOND OF TWO PARTS 



BY DAVID WORTHINGTON 

Watts Humphrey headed the 
IBM development team that 
introduced the first software 
license, and he later served as 
its director of programming and 
vice president of technical 
development. He is a fellow of 
the Software Engineering Insti- 
tute and the Association for 
Computing Machinery, as well 
as a recipient of The United 
States Patent and Trademark 
Office's National Medal of 
Technology 

Accolades and accomplish- 
ments aside, he's also made his 
share of mistakes, and from his 
decades of experiences, he 
learned hard lessons about how 
software projects should be 
managed, how to manage 
teams, his bosses and himself. 
Humphrey recounts those 
experiences in his recent book, 
"Reflections on Management," 
which he elaborates on in the 
second part of this interview. 

SD Times: In a low-growth econ- 
omy, how does a manager make 
the case for prioritizing projects 
rather than triple-assigning pro- 
grammers to pretend that every 
job was staffed? 

Watts Humphrey: All it takes is 
guts, and the brains to recog- 
nize that you are just putting 
off an inevitable problem and 
making it worse at the same 
time. Double- and triple- 
staffing projects is wrong for 
four reasons: 

It destroys teams. No one 
knows who is on the team, so no 
one can count on anyone else 
for help when they need it. 

It demotivates the engi- 
neers. In effect, management is 
telling them, "We can't set pri- 
orities, so you decide what to 
do." This is like telling the engi- 
neer that none of his or her 



work is very important, and that 
management is just pretending 
that all these projects are being 
worked on. 

It destroys productivity. It 
takes time to switch jobs and to 
rebuild the context of what you 
were doing a day or two earlier. 

Finally, by double- and 
triple-staffing your projects, 
you are pretending that you can 
do more work than you actually 
can do. 

Why pretend? Face the issue 
now. If management insists on 
taking on more work than 
they have resources to accom- 
plish, that's their problem and 
make sure they know it. Stick to 
your guns, and as long as you 
have good plans, you will win the 
inevitable battles. 
You stressed the importance of 
open dialog throughout your 
book, yet noted, "Bearers of bad 
news are the first to be shot." 
How can you expect team mem- 
bers to willingly provide feed- 
back and communicate freely, 
and to fully contribute what he 
or she knows? 

This is a question of trust. In 
the typical blame-based man- 
agement culture, it is risky to 
speak out. This inhibits innova- 
tion and creativity, delays early 
warning of problems until it is 
too late to prevent them, and 
makes people unwilling to iden- 
tify problem causes for fear of 
being blamed for the resulting 
damage. 

Admiral [Hyman G.] Rick- 
over, when he established the 
U.S. Navy's nuclear fleet, insti- 
tuted an open and honest cul- 
ture. He required that all prob- 
lems on a nuclear submarine be 
reviewed by a captain's mast, 
the causes identified, and the 
corrective actions reported to 
his office. This produced an 
unrivaled quality culture, which 




continues to this day. 

The only way to establish 
such a culture is from the top, 
but that takes leadership and an 
appreciation of the new styles 
of management required for 
modern systems and software 
work. 

You frequently note how ideal 
self-directed teams are, and that 
teams must first become cohe- 
sive in order for that to occur. 
Can distributed teams ever really 
become cohesive? 
Building cohesive and jelled 
teams when the members are 
distributed is more difficult 
than when they are co-located. 
However, we have found that it 
can be done. The key is to fol- 
low an orderly team-building 
process like that provided by 
the TSP and to ensure that all 
team members are in agree- 
ment on the team's goals and 
plans. This is best done by 
bringing all team members to 
one location for the team 
launch. However, even a dis- 
tributed team launch can be 
handled with the use of various 
conferencing tools and aids as 
long as it has proper leadership 
and coaching. 

With teams we have launched 
in India and on the U.S. west 
coast, for example, this required 
that one of the groups work late 
at night, but we have not found 
that to be a serious problem. A 
cohesive team can still result as 
long as the launch is properly 
conducted and as long as senior 
management participates when 
they are supposed to, even if it is 
late at night. 

Given the impact that personali- 
ty and politics have on any orga- 
nization, can a closed group 
where one person dominates 
realistically transition into being 
an open group? 

continued on page 21 ► 



You program in Java, 
but still use a relational database. 



Back end: 

Relational database 



Front end: 

Object-oriented programming 




There's something wrong with this picture. 



Unlike relational databases, InterSystems 
Cache® is a perfect match as the back end for 
object-oriented programming. It's the world's 
fastest object database, and runs SQL up to 5 
times faster than relational databases. 

Plus, with an innovation by InterSystems 
called Jalapefio™, Cache persists Java objects 
without relational mapping - reducing 
development time for Java programmers by 
as much as 40%. 



Cache delivers massive scalability on minimal 
hardware, requires little administration, and 
incorporates a rapid Web application develop- 
ment environment. It's available for all major 
platforms - and it is deployed on more than 
100,000 systems ranging from two to over 
50,000 users. 

We are a global software products company with 
a 3 2 -year track record of offering advanced soft- 
ware technologies for breakthrough applications. 



InterSystems 



Try an innovative database for free: Download a fully functional, non-expiring evaluation copy of Cache, 
or request it on DVD, at InterSystems.com/Cache21JJ 



D 2010 InterSystems Corporation. All rights reserved. InterSystems Cache is a registered trademark of InterSystems Corporation. Jalapefio is a trademark of InterSystems. 2-10 Cache21 SDTi 
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Recreating Amazon APIs for private clouds 

Former MySQL CEO leads Eucalyptus in its ambitions for on-premise infrastructure 



BY ALEX HANDY 

While Silicon Valley environ- 
mentalists consider Eucalyptus 
trees to be an invasive species, 
MySQL's former CEO is betting 
that the company named after 
the trees will become old 
growth in the data center. Euca- 
lyptus announced in June that it 
has updated its cloud infrastruc- 
ture platform with new features 
and capabilities, including sup- 
port for Windows applications 
and VMware hypervisors. 

Eucalyptus began as an 
effort to implement Amazon 
Web Services APIs in a suite of 
private cloud software. The 
resulting product gives develop- 
ers a platform to deploy in their 
data centers, and it aims to be 
feature-compatible with AWS. 

Marten Mickos, CEO of 
Eucalyptus and former CEO 
of MySQL, said that his new 
company is aiming to work in 
parallel with Amazon rather 
than compete against it. 

"We and Amazon are in adja- 
cent markets," he said. "We see 
them as complementary to us. 
Some companies are happy to 
be in a hosted cloud. Others are 
saying, 'We love cloud, but we 
need to run this on premise.'" 
For the on-premise folks, Euca- 
lyptus offers Amazon-like 
behavior for private clouds. 

Why mimic Amazon's cloud 
APIs? "Those APIs are emerg- 
ing as an industry standard," 
said Mickos. "I wouldn't be 
surprised if everybody will 
support them after time. It's a 
little premature, but I liken it 
to what IBM did in the 80's 
when everybody made stan- 
dard PCs. Cloud computing is 
a more massive business than 
the PC business." 

Eucalyptus Enterprise Edi- 
tion 2.0 is the first to support 
the execution of Windows 
applications. It's also the first 
version of the software to work 
with the VMware hypervisor, 
which Mickos said is predomi- 
nant in enterprises. 

He said Eucalyptus Enter- 
prise Edition 2.0 costs US$299 
per core. He said that while 
things are moving quickly 
at the company, the overall 
goals are still quite broad and 
will take time to complete. 

"We are building a very 
mission-critical and vital part 
of the infrastructure stack," 



said Mickos. "That is a massive systems is really different from ing: driving down latency and overnight and change it the 

undertaking. It's a really diffi- just building scalable systems. increasing elasticity. It's not an next day. This is serious stuff 

cult engineering problem. "We deal with the funda- overnight thing. It's not a web- we will take many years to 

Building massively scalable mental questions of comput- site where you can build it build." I 
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Single runtime pulls together, 
integrates business processes 

Oracle provides BPM in its Fusion middleware 



BY DAVID WORTHINGTON 

Oracle has introduced a new component 
of its Fusion middleware to provide a 
unified foundation for business process 
management throughout its stack. 

Oracle Business Process Manage- 
ment Suite llg, released in June, pulls 
together BPEL and BPMN 2.0 process- 
es into a single runtime that incorpo- 
rates human workflows with rules. The 
runtime feeds those processes into other 
Oracle solutions. 

To that end, it integrates with Fusion 
middleware products, including Oracle 
SOA Suite, Oracle Business Activity 
Monitoring, Oracle Business Intelli- 
gence Suite Enterprise Edition Plus and 
Oracle Universal Content Management. 

Business Process Management Suite 
can leverage Oracle's Coherence distrib- 
uted caching technology, which is also a 
part of the Fusion stack. The customer 
gets linear scalability as demand increas- 
es, and there are rich event processing 
capabilities, said David Shaffer, vice 
president of product management for 
Oracle Fusion Middleware. 



The suite provides a role-based busi- 
ness process rules modeler that is 
focused on user-centric design, with 
each tool tailored to fit for multiple 
roles, said Shaffer. 

Another tool called Process Compos- 
er, a Web-based process modeling and 
deployment tool, is available on Ama- 
zon's EC2 cloud environment as an AMI 
(Amazon Machine Imagine) image, 
Shaffer added. 

Processes may be analyzed and mon- 
itored with built-in reporting tools for 
further refinement. "Developers see 
dashboards displaying individual process 
metrics and aggregate data. They can 
analyze those further using business 
intelligence tooling," he said. 

That ongoing optimization, along 
with a model-driven approach to process 
development, helps business and IT 
professionals to "work together more 
collaboratively throughout the process 
life cycle than was possible in past solu- 
tion development approaches," said Jim 
Sinur, vice president of Business of IT 
Research Division at Gartner. I 
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Nevron components integrate seamlessly in web and desktop applications, SQL Server Reporting Services 
2005/2008 reports and SharePoint 2007/2010 portals and deliver an unmatched set of enterprise-grade 
features. That is why Nevron is the trusted vendor by many Fortune 500 companies for their most demanding 
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Confusion follows resolution in Bilski 



BY DAVID WORTHINGTON 

The United State Supreme 
Courts ruling in June in the Bil- 
ski v. Kappos case affirmed the 
decision to strike down a patent, 
but was too narrow to apprecia- 
bly abate the confusion around 
which computer software 
patents are valid, experts say. 

The central issue of the case 
involved the validity of a patent 
claim for a business method for 
hedging risks in commodities 
trading. After the Court spent 
more time deliberating than any 
other patent case since the early 
1990s, it agreed with a lower fed- 
eral court ruling that the busi- 
ness method was not patentable. 

The federal circuit court 
ruled in 2008 that while it is okay 
to have an invention that has a 
computer in it that performs 
computations, that pure compu- 
tation in general is not 
patentable. It also suggested the 
creation of a "machine-or-trans- 
formation" test for determining a 
process for patent eligibility. 

The Supreme Courts ruling 
strengthened the "abstract idea" 
exclusion from patentability, but 
failed to provide an actual test or 
to give guidance to inventors, 
defendants or the United States 
Patent and Trademark Office, 
said James Grimmelmann, an 
associate professor at New York 
Law School. The abstract idea 
exclusion is a reference to the 
principle that laws of nature and 
abstract ideas are not 
patentable, he explained. 

Some people claim that all 
software is an abstract idea, 
because programming is just a 
form of mathematics, Grimmel- 
mann said. Others think that 
software is patentable because 
it's implemented on physical 
computers, or that those com- 
puters control other machinery, 
or that the algorithms are actual- 
ly specific enough not to be 
"abstract," he explained. "The 
Supreme Court appears to come 
down somewhere in the middle, 
but doesn't really say where." 

Mark Lemley, a professor at 
Stanford Law School and direc- 
tor of Stanford's program in law, 
science and technology, credited 
the court for ruling as narrowly 
as possible, but acknowledged 
that many issues still have to be 
resolved. "There aren't any tests 
in this area that work. They can 
all be manipulated and/or lead to 
undesirable lines," he said. 

The refusal to endorse the 



lower court's "machine or trans- 
formation" test "as an effective 
method for deciding what is and 
what is not patentable" leaves 
considerable uncertainty, said 
Eben Moglen, a Columbia Uni- 



versity Law School professor 
and chairman of the Software 
Freedom Law Center, which 
provides legal assistance to the 
Free Software Foundation. 
"[The Court] has said that its 



own previous cases shed all the 
necessary light on the issue of 
the validity of the current 
patent, thus creating a we 
know unpatentability when we 
see it' system that is of no use to 



the Patent Office or the Feder- 
al Circuit," Moglen added. 
"The Court behaves as though 
the bad patent it unanimously 
agrees is bad were an aberra- 
tion, instead of one among tens 
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of thousands of bad patents cre- 
ated by the system over which 
the court today failed to exer- 
cise any meaningful control." 

The confusion over software 
patents will lead to more money 



being spent on "wasteful litiga- 
tion over patents that should 
never have been issued," Moglen 
said. Consequently innovation 
will be stymied before the issue 
returns to the Court, he added. 

Moglen hopes a future 
Supreme Court will be able to 
bring patent law under consti- 
tutional control. I 



Built-in feedback for Rally ALM 

Idea Manager provides company/customer collaboration 



BY KATIE SERIGNESE 

Application life-cycle manage- 
ment vendor Rally announced in 
June the release of its new agile 
ALM platform, Rally Unlimited 



Edition. Building on its Enter- 
prise Edition platform, the 
release has several new features, 
including an Idea Manager, 
Quality Manager and Integration 




Hub. Enhancements were also 
made to its administrative fea- 
ture, Enterprise Administration. 

Rally's Idea Manager is a 
feedback website that enables 
companies and customers to 
collaborate on work. Customers 
can submit feature requests and 
comments, as well as vote exist- 
ing ideas up or down. Fully inte- 
grated into the platform, the 
Idea Manager enables product 
managers to efficiently add 
ideas to their product backlog to 
get implementation of the fea- 
tures started. As development 
continues, customers are kept 
informed of work progress. 

With the new Quality Man- 
ager feature, developers and 
testers can schedule and run 
tests throughout the applica- 
tion's life cycle. Regression tests 
can run within iterations while 
users execute scheduled manu- 
al, system or functional tests. 
Users can also organize test cas- 
es by functional area for quick 
test-plan assembly, the compa- 
ny said. 

The platform's Integration 
Hub offers users a suite of con- 
nectors for data and workflows 
across an organization. The 
add-on supports HP Quality 
Center, Rational ClearQuest, 
Visual Studio Team Foundation 
Server and others. The feature 
also enables users to create 
mashups, as well as to test and 
deploy to destinations such as 
Web portals, wikis or IDEs. 

Unlimited Edition also 
includes a new Product Manag- 
er and Time Tracker. For teams 
using Salesforce.com, Product 
Manager integrates with the 
Customer Relationship Man- 
agement (CRM) solution to 
centralize customer feedback 
collected by sales and support 
teams. By using the CRM data, 
product managers can prioritize 
features most important to the 
customers. Time Tracker inte- 
grates time entry screens into 
the platform to reduce daily 
overhead of tracking time. 

Additionally, the Enterprise 
Administration feature was 
enhanced to enable administra- 
tion of larger teams. Upgrades 
include an expanded user 
search, edit and permission fea- 
tures, among others. 

Unlimited Edition is avail- 
able now for US$49 per user, 
per month in SaaS or on- 
premise offerings. I 
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By the year 2020, more videos will be stored on your personal video 
player than are possible to watch in your lifetime, even if you stayed 
awake for 24 hours a day. Dual watching screens will have been 
invented so that each eye/ear pair can watch and listen to a differ- 
ent video. Textual feeds of tweets will be superimposed on the 
videos, so that you can keep up with all the latest gossip. 
The first beta release of a direct-to-brain version of a video 
player will have been introduced to overcome the limitation of the 
optic nerve input device. A few bugs in the device will have caused some 
people to go crazy as "Star Trek — Yet Another Generation" somehow plays in an endless 
loop. The direct-to-brain audio input device will be in its third generation, allowing you to 
listen to 100 MP3 files or XM radio channels simultaneously. 

Ken Pugh, fellow, consultant, Net Objectives 



As seen by... 

Here are some of the exciting things I believe will be true about our 
future systems — that is, the ultra large-scale ones that will grow 
to a size that prevents them from being stopped and reinstalled; X* 
that need to be running continuously or bad things will happen; and 
that must be repaired and extended only while they are executing. 

They will not be fully engineered. Integration of the existing 
systems that make them up will display significant emergent be- 
havior that's hard to predict. There will be no way to fully test or beta 
test what is deployed. The systems will be too big to fail. We won't know 
how to design them, or even be sure what design is in this reality. Many of these 
systems involve civil and, above all, human safety. Adversaries will continually 
attack such systems, be those adversaries people on the attack, machines on 
the attack, or errors, faults and failures on the attack. 

Requirements will not be consistent, and sometimes requirements will 
be way out of date and stakeholders long departed, if not dead. There 
will be a larger gap between such ultra large-scale systems and 
enterprise-scale systems than between enterprise-scale systems 
and individual applications. Chaos and inconsistencies will 
abound. Failures will be constantly occurring. 

People will be part of the system, and inextricably so. 
And finally, such systems will be beyond human compre- 
hension. 

Richard P. Gabriel, computer scientist and Al expert, 
currently at IBM Research 
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As seen by... 

The current generation has grown up not knowing that the Internet has not 
always existed. While this has been an Internet characterized by people 
living on the edges, our industry is subtly but inexorably moving to an 
Internet of things. 

Still, no matter what we may dream, it requires software to make 
those visions manifest, and for the foreseeable future, developing 
software-intensive systems will continue to be hard. This will still be the 
burden of our industry in 2020. But, for most of the world who will come to irreversibly depend 
on the complex artifacts we create, the software-intensive systems we weave will become 
more and more transparent to them (as any good technology should). 

Grady Booch, IBM fellow, chief scientist for software engineering, IBM Research 
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+&m\t> In the realm of envisioning what could be, 
A^. 2020 begins an era of "invisible technol- 
<£> ogy." Computing devices are the means 
^ for entertainment, insights and deci- 
sions; they are fully integrated into all 
aspects of our life. Applications are cre- 
ated using advanced user interfaces — 
gesture, touch and voice interactions — and 
then they automatically link together essential 
code modules. Application development moves closer to the brain's 
problem-solving methods and uses more of everyday speech/writ- 
ing. Technology is powerful and sophisticated enough that applica- 
tions will know how to interact with the middleware that lives in the 
cloud — passing information back and forth seamlessly through the 
best available routes — using all available resources to compute, 
render, stream, search and analyze the world's exponentially grow- 
ing store of digital data. 

You won't have to think about the hardware or software that is 
underlying this process to be able to manipulate it easily; it will be 
invisible to you, and thus won't get in the way of your creativity. 
Margaret Lewis, director of software product marketing, AMD 




As seen by... - m 

The personal computer, as we have known it, will disappear from the broad middle of the 4jv ^^^ vyt 
market. At the high end, content creators will continue to rely on full-featured PCs to run <£> 
tools such as Adobe Creative Suite 8 and Xcode 5.1. At the low end, people who haven't 
updated their systems since Windows 7 Service Pack 3 will still be using old-fashioned 
laptops and desktops. 

But the great mass of users will have moved to radically simpler devices of which 
Apple's iPad was the prototype, but which will be available in a variety of form-factors, 
including clamshell notebooks with keyboards and desktop units with large displays. These 
devices will be characterized by task-specific apps, all but invisible operating systems, extensive use of cloud 
resources, and no system error messages, ever. Microsoft, which resisted the trend to the bitter end, will still be 
a big player in back-end systems and the enterprise, but will have all but disappeared from the consumer space. 

Steve Wildstrom, former BusinessWeek technology writer 

As seen by... 

£- ^ When asked to envision the state of development circa 2020, the first thing that comes to my mind is a pair 
<$^ ~_ ^fc* °* ca ' cu ' at ' ons ' matle last year — one based on demographics, one based on technology trends — that both 
^Mk ^<* concluded we'd see "cloud" services as the dominant mode of software delivery by, yes, sometime 
& between 2020 and 2022. 

Clouds make developers far freer to use the tools and languages of their choice, driven by problem 

domain and skill set, rather than being constrained by the installed base of client hardware and operating 

system. The so-called "application barrier to entry" that was bruited about during a certain antitrust trial 

will pretty much be gone. Most computation will take place on shared resources, exchanging API calls via 

non-proprietary protocols, with only standards-conformant client apps (or whatever we call browsers 1 years 

from now) on edge devices. 

At the same time, however, vastly more devices will have some kind of network interaction, so people who really want to write 

bare-metal code will have vastly more scope for their talent than they do today. Pick the game you'd rather play; the chance to 

deliver value will be greater than ever, whichever arena you choose. 

Peter Coffee, director of platform research, Salesforce.com; former Technology Editor, eWEEK 






To celebrate the 250th issue of SD Times, we wondered what the software 
development industry would look like at our 500th issue — which would be 
in December 2020. Here are 13 looks into the future. 



rtlfl* "2001: A Space Odyssey" shows a software system (HAL 9000) who is comf 
vj^ " j™ i &//^ from mental illness. Although "Artificial Intelligence" has been a bust, 
jS M^^ / fy, equivalent storage law enables complex emergence in large-scale ne 




FK 



^ 
£ 



As seen by.. 

"2001: A Space Odyssey" shows a software system (HAL 9000) who is complex enough to suffer 

Moore's law and the 
i networks. Current soft- 
ware is complex enough to host self-replicating computer viruses. Tomorrow may produce 
even more surprises. 

a One important branch of metaprogramming will be evolutionary algorithms. Traditional data 

\^^£ * , processing will of course still exist (we are still programming in COBOL), but evolving crawlers 
will represent user and organizational intentions in the search space of the world's data cloud. 
Today's crawlers primarily index the public internet for search — but as we start to interconnect 
business services and public and private clouds through standards and policies, we can shift from discov- 
ering information to discovering solutions to business problems. 

Miko Matsumura, vice president or product marketing and chief strategist, Software AG 



As seen by. 




As seen by. 
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In the next 10 years, we can look for a major shift toward evolutionary development of 
v> software. This approach is inspired by a Darwinian analogy. A system is divided into 
^X modular components, which are developed in parallel. When a component has 
•^ achieved about 80% of its functionality, it is released for field testing. 

Some components will survive testing and be improved; others will fail test- 
ing and be abandoned. The set of surviving components will evolve into a working 
system. Since many modules achieve about 80% functionality in about 20% of their 
total development time, this approach is likely to yield working systems much faster 
and at much less cost than current development methods. 
Moreover, the constantly evolving system can keep up with changing requirements from 
the environment, reducing obsolescence. This approach is now becoming feasible because of 
new tools for contributing software to the cloud. It deserves to be subjected to many ex- 
periments to see if it can deliver this potential. 

Peter J. Denning, distinguished professor, Naval Postgraduate School 



It's 2020, and more than ever, 
f much of the news from the 
' tech industry is about Apple. 
In an effort to beat aging 
and various health concerns, 
Steve Jobs has transferred his 
consciousness to a device 
running iOS 9. Rumors suggest 
that the hardware resembles the 
fourth-generation iPad, but with an ex- 
pansion port that supports several accessories. 

The reporters at WWDC are all commenting on 
how thin he looks. 

Insiders say that he often complains at his as- 
sistants for "holding him wrong" when they move 
him from room to room. 

The guys at Gizmodo are claiming that they 
found a prototype of the device in the dumpster 
behind a coffee shop and installed Flash on it. 

Eric Sink, founder, SourceGear 




As seen by... 



Governments have become far more active in regulating and 
taxing Web activity and assuring, though still largely ineffec- 
tively, the safety of Web users. Information that previous 
generations thought was confidential is readily available on the 
Web, and a common practice is likely something akin to job 
sniping, where one candidate for a position knocks out the 
others by placing red flags in their virtual backgrounds. 

Focus is less on getting to information and more on assuring the validity of 
that information. Technology firms have, responding to Apple's success, 
largely become vertically integrated in the technology segment, and the 
Intel/Microsoft focus on specialization has fallen off sharply. 

Rob Enderle, principal analyst, Enderle Group 






As seen by... 



As seen by... 

The whacky scenario I like is, "If you can't manage your own desktop, you're 
fired." While there's security and compliance reasons to centralize desktop 
management in companies now, it's increasingly looking weird that IT depart- 
ments spend so much money provisioning and then maintaining employee 
desktops. Many middle-class, white-collar employees have better machines that 
they like more than their work-provisioned equipment, so why not use those? 

What's more, if people can't manage their own desktops and use self-service sign- 
up to get services, do they really qualify as "computer literate," a job requirement all of them 
certainly had? Companies aren't expected to provide and maintain cars or transportation for employ- 
ees to get to work, so why computers? 

Michael Cote, analyst, RedMonk 
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In the year 2020, the idea of a desktop computer (except for those few people who do all their work at a 
desk) will seem obsolete. Most users will carry their information life around with them, via some combi- 
nation of a small access device and both on-body and in the cloud storage. With the effective cost of 
storage and compute time near zero, users will simply save everything forever, creating a library of their 
computer-based life. 

Since much of our communication, event tracking and information will be computer-based, we will all have 
the basis of an ongoing autobiography. Of course, an enterprising new company will no doubt attempt to mine an anonymized 
version of that data for both its historic and marketing value. This time, consumers will be smarter and instead of being will- 
ing recipients of hours of wasted time viewing ads, they will demand a payment for their information. 

Amy D. Wohl, editor, Amy Wohl's Opinions 



As seen by... 

Sorry folks, it looks like we're 
heading for even more decen- 
tralization. Large and even medi- 
um-sized companies will act 
more like holding companies, 
providing funding and loose guide- 
lines to smaller, specialized mini-busi- 
nesses. The mini-businesses will be born and die at 
rapid pace, with a select few that have hit a market 
sweet spot and taking on a life of their own — perhaps 
becoming a holding company themselves. This will be 
reflected in technology as well, micro-development 
teams of two or three developers will rapidly assemble 
services from the cloud around a proprietary service 
or technology of their own. 

2020 will also realize the fulfillment of the end of 
the desktop. Applications running locally will be rele- 
gated to a few, specialized applications, and the duties 
of the operating system are handled by Web browsers. 
Max Heeler, VP of product management, Motley Fool 
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Aster Data expands SQL map/reduce 

Business users now have building blocks for unstructured analytics 



BY ALEX HANDY 

Aster Data has built a business 
out of map/reduce, and June's 
release of a thousand new SQL 
query building blocks — what it 
calls "functions" — is designed to 
give business users access to 
map/reduce computed analytics. 

Whereas open-source big 
data solution Hadoop, for 
instance, is based entirely on its 
own implementation of 
map/reduce, as well as a set of 
homegrown query structuring 
frameworks like Pig and Hive, 
Aster Data wants to use SQL 
right from the start. Sharmila 
Shahani-Mulligan, executive 
vice president of marketing at 
Aster Data, said that this is a sig- 
nificant advantage over Hadoop. 

"Hadoop lends itself more to 
batch-type processing. Most of 
our customers are running ana- 
lytics on a daily basis with the 
expectation of results returned 
every few minutes," she said. 
"It's not real-time, but it's near 
real-time. 

"The second advantage is 
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Aster Data uses map/reduce to analyze data, working with SQL-based building blocks to ease the process. 



SQL map/reduce. We are liter- 
ally targeting the business ana- 
lyst with SQL using full 
map/reduce underneath." 

Map/reduce is the frame- 
work for processing huge 
amounts of data, and it is the 
basis of the Apache Hadoop 
project, as well as of BigTable, 
which runs Google's search 



engine. Using map/reduce, 
huge stores of data can be 
processed, and the results can 
be combined into a cohesive set 
of information. 

Stephanie McReynolds, 
director of product marketing 
at Aster Data, said the new sets 
of query-building tools aren't 
limited to business users. "We 



introduced many new business 
analyst-ready functions," she 
said. "[These] functions address 
particular business issues, like 
path analysis for website traffic. 
"We also have a series of 
packages for power users. 
These are for people building 
their own SQL map/reduce 
applications. They want to use 



Java or C functions to get 
ahead. These are smaller build- 
ing blocks." 

Shahani-Mulligan said that 
Aster Data's analytics can be 
tweaked and queried by busi- 
ness users, a major advantage 
over Hadoop. She said that 
many business users already 
know SQL, which cannot be 
said of Hive or Pig. She said 
that with Hadoop, developers 
likely need to be called in to 
implement any analytics batch- 
es that need to be run, but with 
Aster Data, the business users 
can do that themselves. 

"With almost any of our [cus- 
tomers] you talk to, one of the 
big appeals has been that their 
existing business analysts can 
work with functions and don't 
have to use a new language," 
said Shahani-Mulligan. "This is 
why we came out with SQL 
map/reduce. Some of them also 
have Hadoop, but it requires 
you to do constant programming 
in map/reduce versus having a 
simple-to-use interface." I 
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Spoon-feeding runtimes into executables 

Virtualization platform builder creates servers to load apps over the Web 



BY DAVID WORTHINGTON streaming server that loads 

Spoon, a virtualization platform applications over the Web with- 

builder formerly known as out requiring runtimes or dri- 

Xenocode, is serving up a ver downloads. 



Spoon Server became gen- times or the .NET framework 

erally available in June. It into an executable. Applications 

allows developers to embed any can be deployed without the 

version of Adobe AIR, Java run- runtime being present on an 
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end user's machine. 

Other dependencies such as 
Flash or SQL Express may also 
be included, said founder and 
CEO Kenji Obata. The server 
supports 64-bit applications. 

Applications are streamed 
through HTTP on port 80 
(which is not blocked by fire- 
walls) through a browser plug- 
in that works with all major 
browsers, said Obata. 

The company has set up a 
browser sandbox to demonstrate 
both the isolation and virtualiza- 
tion capabilities of its application 
virtualization engine. 

Spoon Server is offered 
under a per-seat licensing 
more for enterprises, and a 
per application license model 
for software publishers. A free 
evaluation is available on the 
Spoon website. I 

CONCERTO 4.0 
WIDENS SUPPORT 
FOR STANDARDS 

BY KATIE SERIGNESE 

Parasoft, a supplier of testing 
software, announced the release 
of its software development 
management platform, Concerto 
4.0. The latest version includes 
new preconfigured system and 
process templates for common 
market and industry standards. 

The templates couple auto- 
mated testing solutions with 
preconfigured recommenda- 
tions, requirements and guide- 
lines from the FDA's General 
Principles of Software Valida- 
tion and other industry stan- 
dards and guidelines. 

For building medical soft- 
ware, the FDA may require or 
recommend a certain level of 
peer review and defect pre- 
vention, said Wayne Ariola, 
vice president of strategy. 
With a check of a box, "[Con- 
certo] allows [management] to 
invoke these practices and sets 
them automatically" through- 
out the software development 
life cycle. 

"Nothing can get through a 
process without meeting the 
predetermined policy," Ariola 
said, adding, "Concerto takes 
ad hoc infrastructures and cre- 
ates an environment with con- 
sistent outcomes." 

Concerto's automated defect 
prevention and end-to-end QA 
testing can also be integrated 
into any development environ- 
ment and toolset. Concerto is 
available for US$50,000 for 50 
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Flash or HTML5? It depends on the user 



< continued from page 1 

course, rebutted that Apple sim- 
ply wants to keep tight control 
over everything that runs on its 
company's devices. 

The irony, according to UI 



designer Jeff Gothelf, director 
of user experience at The Lad- 
ders. com, is that Jobs is becom- 
ing a proponent of a very open 
standard HTML, while every- 
thing else Apple does is closed 



and locked down. 

From Francos seat, the war 
between the technology giants 
"is not helpful for developers. 
The conversation has not pro- 
gressed beyond 'Apple sucks' or 



'Adobe sucks.' From the user 
experience, it's annoying that I 
can't see all content on the Inter- 
net on my iPad. That makes it a 
poorer user experience." 

Because of the rift, Franco 
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said, developers have two 
choices: "They can either build 
[the application] twice, or build 
it less" — meaning the desktop- 
or browser-based application 
might lose functionality if it 
uses HTML5, which lacks the 
richness of Flash. 

Most large enterprises are 
making the decision to build the 
application twice, said Franco. 
"It's a philosophical question. 
The Holy Grail has been to 
write once and deploy any- 
where. But that doesn't address 
user adoption. The experience 
has to be built for the device 
people most want to use." 

Gothelf said, "You can't deny 
the traffic being driven by those 
devices. It forces you to rethink 
your application. If HTML5 
can't handle it, then from a 
design standpoint, you might 
want to simplify the experience." 

But writing the application 
twice might be the best choice 
for organizations that must have 
the best experience possible for 
the device or computer upon 
which the application is run. "A 
touch interface versus point- 
and-click, and a significantly 
smaller screen resolution, these 
are significantly different expe- 
riences," said Gothelf. HTML5 
might lack the power and level 
of flexibility of Flash, he said, 
but Adobe needs to streamline 
its code to make Flash easier to 
work with. 

Franco said the challenge 
here for application architects, 
designers and developers is 
making the decision as to which 
way to go. "It's a question of 
which platform to build on. Is it 
maintainable? Scalable? Will 
the platform be around two, 
three, five years from now?" 

It all begins with user 
research and gathering good 
user data before design, inter- 
action or technological deci- 
sions are made. "Bluntly, that's 
a step that's often missed," 
Franco claimed. "If the CEO 
says we need an iPhone app, we 
can validate that or not with 
user research." 

Gothelf sees Flash continu- 
ing to reign supreme for online 
advertising and banners, but for 
page-level experiences and 
transitions, "there's no reason to 
force Flash." 

He added that now there is a 
skills gap, as most people work- 
ing on Web applications today 
are comfortable with Flash, and 
HTML5 is still so new. "When 
people get up to speed [with 
HTML5], you'll see it become 
much more pervasive." I 
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Humphrey on 'Reflections on Management' 



< continued from page 6 

This really gets back to the trust 
problem discussed in question 
6. In a trusting environment, 
open and honest behavior is the 
norm, and the difference 
between that and a blame- 
based environment is like night 
and day. 

How do you encourage self-suf- 
ficient personality types to ask 
for and receive help when they 
need it? 

The key to this is to help people 
to recognize their own skills 
and abilities, and to also under- 
stand their own limitations and 
weaknesses. We have now 
trained thousands of industrial 
software engineers in these 
methods, and we typically have 
them tell us things like, "I nev- 
er realized how many defects I 
make," "I'm not as good as I 
thought I was," or "My produc- 
tivity sucks." 

The key to self-improve- 
ment is recognizing where you 
fall short and where others are 
able to do better. Then every- 
body, even the most skilled and 
self-sufficient engineers, is 
more realistic about their own 
abilities and much more likely 
to ask for help when they need 
it. They are also much more 
likely to help others and to be 
cooperative and effective team 
members. 

Describe the qualities that an 
ideal team leader possesses. 
The ideal team leader is, first of 
all, a leader rather than a man- 
ager. He or she has clear and 
compelling goals, sells these 
goals to the teams, and sets and 
maintains high performance 
standards. He or she also insists 
that the team make its own 
plans and commitments, and 
challenges the members to 
manage their own problems 
and to consistently meet their 
commitments. 

The ideal team leader also 
builds and develops the team 
members, challenges them to 
do even better, and looks for 
and develops potential leaders 
who could take over whenever 
needed. Great leaders not only 
motivate and guide their 
members, they also know that 
they must have potential 
replacements who can take 
over in emergencies. They also 
know that they can't be pro- 
moted without a potential 
replacement. 

What advice do you have for 
managers who are dealing with 



executives who are focused on 
cutting costs yet demanding mis- 
sion-critical software? 

These are not contradictory 
objectives. Cutting costs is 
always a worthwhile objective, 
particularly when developing 



large-scale mission critical 
software. The key to doing this 
is to focus on the biggest cost 
items. The cost-of-quality 
measure is most useful for this 
purpose, and the cost- 
improvement opportunities 



with big mission-critical pro- 
grams are generally far greater 
than anyone realizes. 

With a measured and man- 
aged quality program, we typi- 
cally see test costs being cut by 
75% or more, and schedules 



being accelerated by many 
months. This has been true for 
both large and small systems 
programs of all types. Again, 
for further information on this 
subject, see my books and 
papers. I 
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Right on time: Eclipse Helios 



< continued from page 1 

kovich said that the Eclipse Marketplace 
does not handle the e-commerce aspects 
of a marketplace, such as transactions. It 
instead redirects users to a vendors site. 
It is accessible via a new client that 
makes installation easier. 

"We're looking forward to seeing how 
the marketplace changes the ecosys- 
tem," he said. "Through the marketplace 
[client], developers can download and 
install plug-ins right from the Work- 
bench." 

The foundation neither certifies 
plug-ins, nor rates or recommends 
them, but it does do error tracking, and 
will shut off access to a plug-in and ask 
the supplier to fix it if it has sufficient 
problems, Milinkovich explained. "We 
don't try to pick winners," he said. 

Milinkovich lauded the effort of the 
Eclipse community for bringing in the 
Helios release on time. The release 
includes updates to 39 Eclipse projects 
and involves more than 33 million lines 
of code, he said. 

"Not many software organizations say 
they've hit their delivery dates seven 
years in a row," he said. "The release 
train continues to grow and continues to 
be a great mechanism to bring Eclipse 
into new areas." 



HIGHLIGHTS OF HELIOS 



The Linux IDE package consists of the new Linux Tools project. That includes 
Eclipse integrations of Linux utilities, such as GNU Autotools, Gcov, Gprof, LTTng, 
OProfile, RPM, SystemTap and Valgrind. 

Support for the open-source distributed version control system Git is provided 
by new Eclipse projects EGit and JGit. EGit 0.8 includes a new Git repository view, 
and support for fast-forward merging and tagging. JGit 0.8, which lives under the 
covers of EGit 0.8, has 50% greater performance improvement when working with 
large repositories. 

The Web Tools Platform project introduces support for creating, running and 
debugging applications written for the latest Java EE 6 specifications, including 
EJB 3.1, JPA 2.0, JSF 2.0 and Servlet 3.0. 

The JavaScript Development Tools project includes a debug framework that 
allows for the integration of JavaScript debuggers, such as Firebug and Rhino. The 
new JavaScript package makes it easier for developers to find, install and use an 
Eclipse-based IDE. I 



Milinkovich said a big part of the suc- 
cess of Eclipse has to do with its releas- 
es being predictable. "It helps compa- 
nies adopting Eclipse to build products 
upon it with confidence," he said. 

He also said that Eclipse's success is 
tied to the success of Java, and Oracle's 
acquisition of Java creator Sun Microsys- 
tems "hasn't changed the direction of 
the Java ship at all." While he said the 
acquisition has had very little impact on 
Eclipse, he said Oracle "needs to take 
steps to ensure the Java ecosystem con- 
tinues to innovate, and to pick up the 



pace of innovation." 

For the future, Milinkovich sees mod- 
eling becoming more important for large 
engineering projects, especially those that 
are safety-critical. Other growth areas he 
sees for Eclipse are in runtimes, with the 
OSGi-based Gemini; the embeddable 
Jetty Java Web server; and Virgo, a light- 
weight Java server formerly known as the 
SpringSource DM Server. 

"These projects are just getting start- 
ed," Milinkovich said, "but a year from 
now, we would expect them to be part of 
the next release train." I 



NetBeans 6.9 
supports OSGi 

BY ALEX HANDY 

Oracle has updated the NetBeans IDE 
to version 6.9, adding JavaFX Composer, 
a visual editor for building JavaFX appli- 
cations. 

JavaFX Composer can also build, edit 
and debug rich Internet applications. It 
can also bind components to data sources, 
including databases and Web services. 

NetBeans is now interoperable with 
OSGi, allowing the creation of OSGi 
bundles on it. Support was also 
expanded to Ruby on Rails, the Spring 
3.0 framework and the PHP Zend 
framework. 

For Java, NetBeans now supports Java 
EE 6, including contexts, dependency 
injection and JSR-299. The IDE can be 
downloaded from www.netbeans.org. 

"This is the first NetBeans release 
under Oracle's stewardship, and we have 
continued to focus on the visual tooling 
capabilities within the IDE," said Ted 
Farrell, chief architect and senior vice 
president of tools and middleware at 
Oracle. "We believe that the ease of use 
and developer productivity provided by 
NetBeans is key in helping developers of 
any skill level take advantage of all of the 
great Java technologies." I 
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CollabNet brings 
visualization to SCM 



BY KATIE SERIGNESE 

Application life-cycle management ven- 
dor CollabNet has introduced a beta 
version of CollabNet Subversion Edge, a 
software stack that combines the soft- 
ware configuration management tool 
with Apaches HTTP Web server and 
ViewVC, an open-source tool written in 
Python for visual repository browsing. 
Layered on top is a new Web-based 
management interface, which installs, 
manages and automatically updates the 
components. 

CollabNet certifies that all the parts 
in the package work together, and it 
includes everything someone would 
need to run the environment, said Victo- 
ria Griggs, senior director of product 
marketing. It's also more accessible for 
those who don't have the knowledge on 
how to get all the parts to work together, 
she added. 

"What's clear is that Subversion 
installation, administration, security and 
governance have historically been com- 
mand-line-driven," said CollabNet CEO 
Bill Portelli. "Responding to this chal- 
lenge, we created CollabNet Subversion 
Edge with an elegant user interface, 



automated configuration and update 
notifications." 

With this release, Subversion can now 
run two ways, Griggs explained. People 
can download the source code and com- 
pile it themselves onto their operating 
system, or they can download the pack- 
age, where Subversion is already com- 
bined with the server and ViewVC. 

In order for someone to combine the 
tools themselves, he or she would need to 
be very well-versed in Apache, or be 
ready to take days or even weeks to get all 
the pieces working, said Mark Phippard, 
director of Subversion engineering. 
Rather, with this, developers can down- 
load and install in minutes, he added. 

The inclusion of a Web-based UI also 
enables easier administration and gover- 
nance, Phippard said. 

Management can use the graphical UI 
to create and manage repositories, as well 
as monitor the overall health of the server. 
Governance and security is also provided 
with support for Lightweight Directory 
Access Protocol and Secure Sockets Lay- 
er security measures. Other administra- 
tive features include control of internal 
and external user access to repositories. I 
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Taking steps to reduce vulnerabilities 



< continued from page 1 

an industry analyst with Red- 
Monk. "If you buy into the trend 
of a lot more systems develop- 
ment going on," which typically 
requires more people touching 



the code, then that kind of 
approach would be too difficult 
and time consuming to imple- 
ment, he added. 

Despite previous develop- 
ments in software integrity, the 



space is still evolving. Recent 
developments include IBM's 
launch of new security solutions 
called "secure by design," 
Rotibi said. This helps organi- 
zations build security into the 



initial design of applications 
rather than leaving it as an 
afterthought, she added. 

Other organizations, such as 
Black Duck, a provider of intel- 
lectual property solutions, are 
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r7.3 - Product Plus 1 Year 
Enterprise Maintenance 

byCA 

CA ERwin Data Modeler is a data modeling 
solution that enables you to create and 
maintain databases, data warehouses and 
enterprise data resource models. These models i 
help you visualize data structures so that you 
can effectively organize, manage and moderate I 
data complexities, database technologies and 
the deployment environment. 



InstallShield Professional 
for Windows 

by Flexera Software 

If your software targets Windows®, 
InstallShield® is your solution. It makes it 
easy to author high-quality reliable Windows 
Installer (MSI) and InstallScript installations 
and App-V™ virtual packages for Windows 
platforms, including Windows 7. InstallShield, 
the industry standard for MSI installations, 
also supports the latest Microsoft technologies 
including Visual Studio 2010, .NET 
Framework 4.0, IIS7.0, SQL Server 2008 
SP1, and Windows Server 2008 R2 and 
Windows Installer 5, keeping your customers 
happy and your support costs down. 
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VMware vSphere 

Put time back into your day. 

Your business depends on how you spend 
your time. You need to manage IT costs 
without losing time or performance. With 
proven cost-effective virtualization solutions 
from VMware, you can: 

» Increase the productivity of your existing 
staff three times over 

» Control downtime — whether planned 
or not 

• Save more than 50% on the cost of 
managing, powering and cooling servers 

Make your time (and money) count for 
more with virtualization from VMware. 



Upgrade from 
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IS Pro Silver Mtn 
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Intel Parallel Studio 

by Intel 

Intel Parallel Studio is a comprehensive 
Windows parallelism toolset designed for 
Microsoft Visual Studio C/C++ developers. 
Parallel Studio is interoperable with the widely 
used Microsoft Visual Studio, supports higher- 
level parallelism abstractions to simplify and 
speed development such as Intel Threading 
Building Blocks and Open MP, is fully supported, 
and provides an immediate opportunity to real- 
ize the benefits of multicore platforms. Tools are 
designed so novices can learn as they go, and 
professional developers can more easily bring 
parallelism to existing and new projects. Create 
optimized, innovative parallel applications and 
compete in a multicore industry. 



Single User 

Commercial 

Paradise # 

123 63101A04 

$ 753." 

programmers.com/intel 




VMware 

Advanced 

Acceleration Kit 

for 6 processors 

Paradise # 

V55 78101A01 

$ 9,234." 
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VMware ThinApp Windows r 
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Migration to the new Windows 7 OS is 

forcing companies to rethink their desktc 

delivery. VMware ThinApp is the easiest 

and most cost effective way to prepare for ^^M 

your Win 7 journey. By virtualizing your 

applications first with ThinApp, you will 

mitigate risk, dramatically speed up the 

migration process — and save money 

when you migrate to Windows 7! 
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jTXText Control ISA 

| Word Processing Components 

j TX Text Control is royalty-free, 

i robust and powerful word processing 

j software in reusable component form. 

j •. NET WinForms control for VB.NET and C# 

! • ActiveX for VB6, Delphi, VBScript/HTML, ASP 

j • File formats DOCX, DOC, RTF, HTML, XML, TXT 

j • PDF and PDF/A export, PDF text import Professional Edition 

! • Tables, headers & footers, text frames, mim'fno 

j bullets, structured numbered lists, multiple T79 ° 2 1 ° 1 A02 

: undo/redo, sections, merge fields, columns $ 1 OOQ 99 

j • Ready-to-use toolbars and dialog boxes 
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Client Licenses 
Minimum 500 with 
Basic Level Support 
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\/55 MIGRATION 

$ 16." 
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BUILD ON 
VMWARE ESXi 
AND VSPHERE 

for Centralized Management, 
Continuous Application 
Availability, and Maximum 
Operational Efficiency in Your 
Yirtualized Datacenter. 

Programmer's Paradise invites you to take advantage 
of this webinar series sponsored by our TechXtend 
solutions division. 

FREE VIRTUALIZATION WEBINAR SERIES: 
REGISTER TODAY! TechXtend.com/Webinars 

Microsoft Office 
Professional 2010 

by Microsoft 

Organize projects, manage finances and 
build a better way to do business with tools 
from Microsoft® Office Professional 2010. 
This software suite includes 2010 versions 
of Word, Excel®, PowerPoint®, OneNote®, 
Outlook®, Publisher® and Access®. It offers 
a Backstage™ view which replaces the 
traditional File menu to give you one 
go-to spot to conveniently save, open and 
print documents. Additionally, the server 
integration capabilities make it easier to 
track. Besides this, the Office Professional 
Plus 2010 also offers complete package 
through familiar intuitive tools. 



Complete 

DVD Windows 

32/64 bit 
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M47 21301A01 

$442.^ 

programmers.com/microsoft 
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involved with setting standards 
for the software supply chain. 
Co-chairing a group called the 
Software Package Data 
Exchange, the company is work- 
ing toward setting policies and 
controls for the sharing of soft- 
ware packages, including licens- 
ing for open-source software, 
said Peter Vescuso, Black Duck's 
senior vice president of market- 
ing and business development. 

These initiatives and others 
are the next steps toward greater 
software integrity. While SAFE- 
Code pointed out future direc- 
tions that deserve further study 
and industry collaboration, such 
as authentic software at runtime 
and more comprehensive data 
on todays practices and controls, 
Rotibi said that these are best 
practices to be implemented 
depending on what you are mit- 
igating. 

"Really, it's about getting 
everyone together on the same 
page with goals and policies," 
she said. I 

Security testing 
takes to the cloud 

BY KATIE SERIGNESE 

Security testing has hit the cloud, 
as Veracode enhanced its cloud- 
based testing service, Securi- 
tyReview Using new APIs, 
developers can now access the 
automated static binary and Web 
application-testing service from 
their build tools, defect trackers 
and IDEs. 

Using Security Review's 
Upload APIs, tests can be run 
at any point in the development 
life cycle. For example, applica- 
tions can be automatically 
pushed to the hosted service 
once it is built, said Roger 
Oberg, Veracode's senior vice 
president of marketing. 

After testing, results are sent 
about the line of code specific to 
vulnerability identification, along 
with instructions for remedia- 
tion. These results can then be 
integrated into defect-tracking 
systems using SecurityReview's 
Results APIs and XML-format- 
ted output. 

A full year's subscription of 
SecurityReview, including 

unlimited static and dynamic 
testing, and access to other ser- 
vices, costs from US$2,000 to 
$5,000, depending on volume. 

By hosting this service in the 
cloud, security testing becomes 
more accessible because devel- 
opment teams don't need exper- 
tise in managing on-site testing 
tools, Oberg said. I 
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The SharePoint 
Technology Conference 
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The best SharePoint education 
is at SPTechCon Boston! 

Planning a quick migration to SharePoint 2010? Seeking to 
maximize your productivity on SharePoint 2007? Sign up for the 
SharePoint Technology Conference in Boston, where Microsoft 
engineers and Microsoft MVPs teach the industry's best 
workshops and classes for IT Pros, Software Developers 
and Business Users. Come to SPTechCon to learn, network 
and go deep with SharePoint. See you in Boston! 

Download the 
Complete Class Listing 
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REPORTING 

ActiveReports 6) 



Powerful Award-winning .NET reporting tool for Microsoft Visual Studio 

featuring super fast performance, incredible high quality, unmatched 
customization and trouble free mufti-language features - all battle-tested 
in tens of thousands of Enterprise applications worldwide. 



* Unmatched customization, performance and quality 

- Rich collection of report designing and rendering components 

■ Medium Trust environment support in ASP.NET 

■ Wide range of cross-platform export and preview formats 

■ Powerful PDF reporting with digital signatures, 
timestamps and multilanguage support 

■ End-user report designer with flexible API 
and full customization 

■ Royalty-free licensing for Web and Windows 
applications 
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The movement promotes databases 
that aren't meant to replace SQL, 
but to complement it 



BY ALEX HANDY 




New waves of application 
development technology 
are often incompatible 
with old ways of thinking. 
Typically, when a brave 
new world opens to programmers, a 
healthy portion of them will cast aside 
the old ways in favor of the new But 
the NoSQL movement is not about 
throwing out your SQL databases to be 
replaced by key- value stores. NoSQL, 
ironically, has nothing to do with avoid- 
ing SQL, and everything to do with the 
judicious use of relational databases. 

NoSQL databases encompass a 
large swath of new databases. They 
include the Apache Cassandra Project, 
an array of key-value stores such as 
Tokyo Cabinet, and even document 
databases like CouchDB and Mon- 
goDB. NoSQL is a broad term that 
has more to do with what a database 
isn't rather than what it is. 

Ping Li, general partner at Accel 
Partners, a venture capital firm in Sili- 
con Valley, said his firm is watching the 
NoSQL movement closely but does not 
yet see a clear leader in which to invest. 
"It will be some time before one of [the 
NoSQL databases] becomes truly hori- 
zontal," he said. 

"I think it's a fragmented market. I 
think if you believe there's a whole set 
of applications that are going be cloud- 
like, they're going to be built on this 
type of database." 

WHY TO USE 

Mike Gualtieri, senior analyst at For- 
rester Research, said that NoSQL 
doesn't have anything to do with 
throwing out a relational database. He 
said that NoSQL really stands for "Not 
Only SQL." He added that a NoSQL 
database can make a great alternative 
to spending enterprise funds on a new 
Oracle rack of database servers. 
Gualtieri said NoSQL is "not 
a substitute for a database; it 
can augment a database. 
For transaction types of 
processing, you still 
need a database. You 
need integrity for 
those transactions. 
For storing other 
data, we don't 
need that consis- 
tency. NoSQL is 
a great way to 
store all that 
extra data." 



He said that saving actual customer 
purchasing information is better suit- 
ed to a relational database, while stor- 
ing more ephemeral information, such 
as customer product ratings and com- 
ments, is more appropriate for a 
NoSQL database. 

That means developers working 
with large Oracle installations can 
rationalize the addition of a NoSQL 
layer into their application stack. 
While Gualtieri said that doing so 
introduces complexity into operations 
and architecture, developers win out 
in the end because most NoSQL data- 
bases are built on top of extremely 
simple APIs that make building appli- 
cations a breeze. 

"From a management standpoint, 
it does complicate things," said 
Gualtieri. "Now you basically have to 
manage your database and NoSQL. 
And the NoSQL stuff is a bear to 
manage right now because it's new. 

"A lot of complexity is in the con- 
figuration. The way NoSQL provides 
high availability is by replicating data. 
When you save to one node, it syncs to 
another node. The way you do that is 
complicated. But, I don't think it 
needs to increase the development 
complexity. From a developer stand- 
point, it's very easy to access that data. 
Most NoSQLs have a simple API that 
says, 'Get me this data,' and it returns 
the data." 

For developers, NoSQL databases 
may provide a simple path to adding 
features to applications. "Say you're 
adding some new features. The first 
thing people think of is their data- 
base," said Gualtieri. "How am I 
going to add this to my SQL data- 
base? You have to create tables and 
fields. Why not look at how you could 
store some of that data in a NoSQL 
database instead? 

"The reason you'd want to do that is 
that it's cheaper. When your data 
scales, it's much more expensive to 
scale a database than a NoSQL. Maybe 
you can defer, infinitely, the need to go 
to an expensive rack solution." 

WHEN TO USE 

Jonathan Ellis is the project manage- 
ment committee chair for the NoSQL 
database, Apache Cassandra. He said 
he was initially drawn to the NoSQL 
movement because he knew that dis- 
tributed databases were essential for 
continued on page 28 ► 
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Phone Verification 

Verify U.S. and Canadian 
phone numbers 

Email Validation 

Correct misspelled, invalid 
emails with easy customization 

IP Location 

Identify geographic location 
of an IP address 



GeoCoding 

Append lat/long and census 
tract/block to an address 



Deduplication 

Identify and merge/purge 
duplicate records 



Download fully-functional trials 
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MelissaData.com/sdtools 
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NoSQL is built 



< continued from page 27 

successful cloud applications. 

"I looked at the open-source projects, 
like Apache Hadoop's HBase and Pro- 
ject Voldemort," he said. "I saw that 
Facebook had open-sourced Cassandra 
and dropped it on the floor. It had no 
community at all. I felt the tech was the 
strongest. I thought if I start with best 
technology, I can build a community 
around it. I started contributing to Cas- 
sandra and built it to where it is now." 

Ellis said that the developers at Digg 
invented a rule of thumb for deciding 
whether or not an environment necessi- 
tates a NoSQL database like Cassandra: 
"If you're layering memcached on top of 
MySQL, you're inventing an ad hoc 
NoSQL database by doing that," said 
Ellis. 

Essentially, that coincides with 
Gualtieri's view of the NoSQL oeuvre: 
doing the jobs that may have traditional- 
ly used a relational database, but which 
requires only a fraction of that function- 
ality. Spreading a single row or column 
of data across a hundred machines, 
which allows for highly available and 
redundant data, is a task at which 
NoSQLs excel. 

And yet there is still a broad swath of 
databases included in the definition, 
some of which are not suited to this task. 
The NoSQL databases themselves 
spread to all sides of the CAP triangle. 
Developers have long known they must 
choose only two: strong data consistency, 
high availability, or partitions. Every 
NoSQL database falls into at least one 



corner of the CAP triangle. These dis- 
tinctions dictate how the database 
should be used. 

Google's BigTable, MongoDB and 
Redis are in the consistency and parti- 
tions corner of the CAP triangle. The 
information in these databases is strong- 
ly consistent and servers can be physi- 
cally distributed across the globe. But 
not all nodes in such systems can read 
and write data at all times, limiting the 
high availability. 

Cassandra, CouchDB and Tokyo 
Cabinet are in the partitions and avail- 
ability corner of the triangle. That 
means that Cassandra is a highly avail- 
able data store that can run on physical- 
ly distributed servers. But it is also an 
eventually consistent system, just as are 
CouchDB and Amazon's SimpleDB. 

Nathan Hurst, founder of 
hirelite.com, actually graphed out the 
various NoSQL databases onto a single 
image. Each NoSQL is placed along the 
CAP triangle to show its strengths and 
weaknesses. 

Hurst said that he learned about 
NoSQLs while developing hirelite.com 
as a Chatroulette clone for introducing 
developers to employers. He used Mon- 
goDB to build the site, and, he said, "I 
was using an API for an event site that 
does a lot of my ticketing. [MongoDB] 
has an API to access its data, and you 
communicate with it in JSON. It was 
going to be a quick thing to integrate, 
and I didn't want to spend a whole lot of 
time on it. 

"Because it uses JSON, I used Mon- 
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Source: Nathan Hurst, Hirelite.com 



NoSQL databases come in many shapes and sizes, and each is tailor-made for very specific 
application development problems. 
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to complement SQL 



goDB. The thing about Mon- 
goDB and JSON is that you 
insert objects and do all your 
querying with JSON, so I was 
able to quickly shovel in any- 
thing I got from the API into 
MongoDB without having to 
set up all the tables." 

DATABASE SHAKE UP 

Jay Jarrell, president and CEO 
of Objectivity, said that the 
NoSQL movement is the 
"biggest paradigm shift in the 
data management world over 
the last seven or eight years. 

"The social networks of the 
world had a specific need, and 
they rolled their own. They 
couldn't use a central server 
relational database because 
relational databases don't do 
relations very well. It's been 
good for the NoSQL guys. We 
have specific problems; it's OK 
to have a specific tool in the 
tool box. There's going to be 
many tools in the next genera- 
tion of data management." 

But despite the movement 
among the Web 2.0 and social 
network crowds, NoSQL is still 
in its infancy. Enterprises, said 
Gualtieri, have yet to even hear 
about these new databases. 

"Wherever I go, one of the 
things I am always asking enter- 
prise customers is, 'Have you 
heard of NoSQL?' Most have 
not," he said. 

"They don't know the term, 
they don't know what it means. 
I think it's very early in terms of 
enterprises understanding how 
to use this." 

Accel Partner's Li said that 
the databases in the NoSQL 
movement are still evolving and 
finding their niches. That means 
the future direction of the 
movement itself is uncertain. 

"Do these things all end up 
looking like a relational data- 
bases over time? Do they all 
evolve into that? I don't know if 
that's the case," he said. 

"I am a believer that not all 
applications are going to end 
up looking like SAP. The appli- 
cations don't need that heavy- 
weight overhead. I think 
there's not going to be one 
database that rules them all. 
Oracle did that for many years. 
I don't think there's going to 
be 10 of them. Maybe two or 
three." 

While Li remains convinced 
that the NoSQL space will 



undergo a winnowing over 
time, he also said that the 
developers behind each 
NoSQL project have become 
attractive hires at companies 



looking to assert their domi- 
nance in the cloud, such as 
when, in March, VMware hired 
Salvatore Sanfilippo of the 
Redis project. 



But no matter what the 
future of each NoSQL project 
is, Li said there's a common 
thread that all the NoSQL data- 
bases pull upon. He said that 



the use of NoSQLs will "evolve 
people into this new cloud mod- 
el by making existing applica- 
tions become more cloud-like." 
Jarrell is confident that 
NoSQL provides opportunities 
for many database companies, 
old and new. "It's exciting. It's 
only going to keep emerging," 
he said. I 
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The Altova MissionKit includes multiple tools for 
working with databases: 

DatabaseSpy® - SQL editor + database query design & comparison tool 

MapForce® - graphical data mapping, transformation & conversion tool 

XMLSpy®- industry-leading XML editor with strong database integration 

StyleVision® - visual stylesheet and electronic forms design tool for 
publishing DB data 



> Download a 30 day free trial! 

Try before you buy with a free, fully 
functional, 30-day trial from www.altova.com . 
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FROM THE EDITORS 

The Supreme Courts 
missed opportunity 

The United States Supreme Court bypassed an opportunity to clarify 
U.S. patent law when it handed down its Bilski v. Kappos patent rul- 
ing. It is unfortunate that bad patents will continue to plague software 
developers. 

The Court ruled too narrowly to halt costly litigation in software 
patents, a matter that slows or even freezes innovation in the market- 
place. This continuance of the status quo is unfortunate and unnecessary. 

The Court affirmed the lower court's ruling that the Bilski business 
process patent was unpatentable, but did not provide guidance or any 
legal tests that could be used to identify what qualifies as being 
unpatentable. No test is flawless, but neither is the system that we have 
today by any stretch of the imagination. 

Lawsuits and patent portfolio warfare by deep-pocketed corporations 
against perceived threats both large and small will persist. Lower courts, 
and maybe even the Supreme Court, will have to revisit the issue in the 
months and years ahead. We believe that onlookers in favor of software 
patents, and those who are opposed to patents, will be equally dissatis- 
fied with the narrow ruling. 

At the same time, we are relieved that the Court did its due diligence 
and did not rule too broadly, because software patents do play an impor- 
tant role in the advancement of technology. A broad ruling could have 
invalidated software patents as a category, and that would harm the abil- 
ity of innovative companies that invest heavily in R&D to operate. 

The Court took a middle-ground approach that left a lot of questions 
unanswered. In doing so, we believe it missed a tremendous opportunity to 
clarify the hairball that every software company faces in dealing with 
patents. The Court took the easy way out, and now we, and our lawyers, will 
continue to face the consequences for years to come. What a shame. 

Testing our 20/20 foresight 

This issue of SD Times marks the 250th edition of this twice-monthly 
newspaper. What a journey it's been since our origins in February 
2000, but we recently explored our history in our 10th anniversary issue 
just a few months ago. For this celebration, let's look forward another 
250 editions, which our calculations place at Dec. 15, 2020. What will 
software development look like then? 

On pages 14-15, you'll read thoughts from 13 thinkers about what they 
envision. None of them predicted that the Eclipse Foundation will deliver 
its 17th annual release train in 2020, continuing a tradition of not missing a 
ship date. (Of course, SD Times hasn't missed a ship date in 250 issues.) 

You also won't see a prediction about Visual Studio 2010's ability to work 
with .NET 11.0, or the self-healing structure of the Z+ + + programming 
language, or an API breakdown of Google's forthcoming AdWords for 
Telepathy service, or the 8TB storage capacity of the postage-stamp-sized 
iPod nano. 

What we can assume, though, is that technology is going to continue 
accelerating. Today's iPad tablets and cloud computing environments will 
be totally obsolete relics, superseded by devices and platforms that most 
of us can't imagine. (Some visionaries, of course, are hard at work design- 
ing those next-next-next-generation systems.) 

Computer power and bandwidth will keep getting cheaper. Storage 
and battery life will increase exponentially. Mobile computing like we see 
in today's smartphones will be harnessed everywhere; there will be an 
app for everything. 

Enterprise servers? Dinosaurs. Remote data centers? Huge. Desk- 
tops? Dying out except as technical workstations. Mobile platforms? Stan- 
dard-issue for everyone from students to office workers to executives. 

If you thought the past 10 years were a rapid ride, you ain't seen noth- 
ing yet. The best is yet to come, and 2020 won't be anything like 2010. I 
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THE ERA OF LIGHT COMPUTING 

has begun — for myself at least. Much of 
the time that I spend on the Internet 
happens on my iPhone. If I had an iPad, 
I would be using it to surf the Web dur- 
ing my free time. 

My iMac is a terrific work machine, 
but I really don't want to spend too 
much of my own time sitting at a desk. I 
suspect that I am not alone. Consumers 
have been buying more computing 
horsepower than they need for too long. 
Portable and less expensive hardware 
can get the job done just as well. 

The trend away from the PC may also 
lead to a greener industry — devices con- 
sume less energy, and are often resold 
and refurbished. The PC won't disap- 
pear over night, but its role is certainly 
being reduced. 

— David Worthington 



FROM THE "THIS HAS GOT to Be 

the Worst Idea EVER!" Department: 
an iTunes app that recreates the sound 
of the obnoxious vuvuzela, that ubiqui- 
tous horn being blown at the World 
Cup soccer matches in South Africa. 
People around 
the globe are 
complaining 
that the horns 
are noisy and bother- 
some, so what better 
way to respond to that 
criticism than to write 
an application that can 
emulate four different 
vuvuzela sounds? 
Even its creator, ad 
agency Pereira & O'Dell, acknowledges 
in its announcement of the application: 
"Despite initiatives to ban the vuvuzela, 




it is the sound of World Cup 2010." Yes, 
and despite several initiatives by par- 
ents, hungry babies still cry, yet I don't 
see a free app recreating THAT sound! 
Enough with the vuvuzelas already. . . 
The sounds of crowds cheering goals and 
showing their national pride — whatever 
nation they root for — is enough for me! 
— David Rubinstein 

IS THERE A "NEW AGE" of analytical 
software on the horizon? HP seems to 
think so. Much related to a technology 
called the Internet of Things, Hewlett 
Packard Labs is 
working on a pro- 
ject called CeNSE: 
The Central Ner- 
vous System for 
the Earth. In a 
nutshell, the goal 
of CeNSE is to 
create a worldwide 
network of tiny sensors that in turn col- 
lect massive amounts of data and feed- 
back to be used in different ways. 

A common example HP uses is con- 
necting thousands of these sensors to a 
large bridge, such as the San Francisco's 
Golden Gate Bridge, and using the 
vibrations the sensors pick up to deter- 
mine the bridge's "health." Engineers 
can then use the information for future 
projects and be alerted to any weakness- 
es in the infrastructure. 

However cool this technology may 
be, it also beckons to a potentially major 
change in analytical software. In order to 
handle real-time data from thousands of 
sensors, analytical software will need to 
be able to crunch data at alarming rates 
and accurately as well. 

— Katie Serignese 




Developers like iPhone/iPad DATA WATCH 
in the short term, Android in the long-term 



Statement 

Has the best app store/market 



iPhone/iPad 

89% 



Android 

10% 



BlackBerry 

0% 



Offers most "discoverability" for apps 


75% 


21% 


1% 


Has biggest market for consumer apps 


85% 


10% 


2% 


Has biggest market for business apps 


65% 


11% 


21% 


Has most capabilities as an OS 


39% 


55% 


1% 


Has most secure platform 


58% 


24% 


12% 


Has the most "open" platform on market 


8% 


86% 


1% 


The best devices run this OS 


64% 


32% 


1% 


The OS has the best short-term outlook 


78% 


16% 


2% 


The OS has the best long-term outlook 


40% 


54% 


1% 



A June Appcelerator survey of 2,733 developers measured what particular aspects they 
like out of the operating systems for the iPhone/iPad, Android, BlackBerry and other plat- 
forms. The results were varied: A majority of developers liked the iPhone/iPad's visibility, 
app store and market share. The Android had a majority interest in its flexibility and open- 
ness. Finally, 78% of developers thought the iPhone/iPad had better short-term 
prospects, but 54% thought the Android had better long-term prospects. 

Source: Appcelerator 
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Giving the Ultimate Client Experience 



Have you ever patronized your favorite 
restaurant and found the wait staff 
distracted, unresponsive or flat-out hor- 
rendous? Perhaps you've encountered 
someone who's given you the impression 
that you're the last priority as though he 
or she would rather be doing anything 
else than take your order. How does that 
experience make you feel? Like you can't 
wait to go back the next time, 
right? You wouldn't call that the 
Ultimate Client Experience. 

So what does a person expe- 
rience when working with you 
or others within your IT orga- 
nization? Clients shape opin- 
ions of your service and apti- 
tude at every encounter — for 
something as simple as a ques- 
tion or as complex as a critical 
service-related issue. This 
means there are plenty of opportunities 
where you can cultivate and synchronize 
the Ultimate Client Experience. 

In the IT industry, when a client 
reaches out to your company, they are 
looking for both technical competence 
(the solutions themselves) and emotion- 
al connections (reliability, trust and 
relatability). Unfortunately in the IT 
industry, many of us who are entrenched 
in the technical side every day tend to 
fixate on those aspects of the products, 
services and solutions we sell, influenc- 
ing our belief that clients will judge us 
based on our technical ability to produce 
results and desired outcomes. 

While the technical demand is 
absolutely true (and expected), our clients 
are also seeking something more, some- 
thing effective. The "feel good," repeat 
experiences that positively impact our 
clients on an emotional level are just as 
important as the solution itself. No matter 
the case, it starts with understanding the 
client's needs and expectations — and 
more importantly, responding attentively 
and competently to those needs. It's like 
going to that good restaurant: When you 
have delicious food and friendly service, 
your experience is enjoyable and you are 
more likely to return. 

Another important note in delivering 
the Ultimate Client Experience is that it 
is not just the responsibility of one indi- 
vidual within your organization; it is 
everyone's. As with the hostess, waiter, 
bartender and chef in a restaurant, 
"touch points" have to be created by var- 
ious people within various parts of your 
organization throughout the life cycle of 
the client engagement — from presales 
and implementation to billing and con- 
tinued support. Each of these touch 
points will help build a strong client rela- 
tionship, delivering memorable experi- 
ences for your clients and repeat busi- 
ness for your company. 

So how do we go about designing the 
Ultimate Client Experience? We become 




the restaurant chefs. Designing the Ulti- 
mate Client Experience is like following a 
recipe for your favorite dish. Once you 
have all the key ingredients, you can 
begin to follow the recipe and achieve 
measurable and repeatable results. 

The following Ultimate Client Experi- 
ence recipe is my creation, and has been 
crafted through many years of experience 
and experimenting with vari- 
ous measurements of ingredi- 
ents, both with favorable and 
not- so-favorable results, 
before attaining a solid and 
profitable dish. When read- 
ing the key recipe ingredients 
below, keep in mind that each 
person's or company's recipe 
might be slightly different, 
with the addition of some- 
thing more here or less there 
to suit individual taste or service. Howev- 
er, the principle is the same: The experi- 
ence needs to be special and memorable, 
leaving the client hungry for more. Here's 
my recipe for providing the Ultimate 
Client Experience: 

Culture is the main ingredient in any 
recipe, like the sweet apples in grandma's 
homemade apple pie. Without a client- 
focused company culture, there is no Ulti- 
mate Client Experience dish. A culture of 
Ultimate Client Experience needs to per- 
meate the organization from top to bot- 
tom and left to right. The client should 
find it easy to engage with you and your 
team. Moreover, your employees' passion 
and commitment should be transparent 
and infectious. This will lead to a client 
that is a stark raving fan. Some of the 
spices I use in creating this accolade-wor- 
thy culture of excellence are Teamwork, 
Values, Shared Vision, Action and, last but 
not least, Fun. You have to have fun. 

People are the next ingredient, which 
are any organization's biggest asset. Just as 
a great chef can turn a simple dish into 
something magnificent, great people can 
do the same for a company, helping to dif- 
ferentiate an organization from its com- 
petitors. Furthermore, great results come 
from having great people in the right 
roles. As Jim Collins, author of "Built to 
Last," states: You need the right person 
"in the right seat on the bus." It all comes 
down to the people. Making the right 
people decisions will promote success for 
the individual, the organization and, ulti- 
mately, the client. 

Build Lasting Business Relation- 
ships. Similar to the relationships we 
build in our personal lives, building 
strong client relationships requires con- 
stant care and attention. Spending quali- 
ty time with your client is crucial to a hap- 
py, healthy and successful relationship. 
Be unique and offer something special 
from time to time. It never hurts to send 
client-tailored surprises such as a birth- 
day or anniversary card, or a hand-written 



thank-you card for attending a meeting or 
placing an order. Just as a chef visits his or 
her tables or sends out tasty treats 
between courses, constantly connecting 
with clients on a special and emotional 
level is an important ingredient of deliv- 
ering the Ultimate Client Experience. 

Understand the Client's Expecta- 
tions. This is a critical ingredient from 
the beginning. It is very common for pro- 
fessional service organizations to excel at 
understanding the technical needs of the 
client and what it will take to fulfill those 
needs. However, frustration can be creat- 
ed on both sides when other, less techni- 
cal and often simpler needs are over- 
looked. For instance, you might be so 
focused on fixing a technical issue at hand 
that you bring down the client's whole 
network in the middle of their day during 
their busiest season. While the technical 
issues needed to be resolved, it could 
have been scheduled at a less busy time 
or after hours. Once you understand your 
client's needs and expectations, you can 
create simple, personal touches that gen- 
erate significant value from the client's 
perspective and validate your investment 
in the engagement. 

Do Common Things in Uncom- 
mon Ways to make the special dish or 
service you provide a unique experience. 
Try performing the most ordinary task in 
a different way, looking at it from a dif- 
ferent perspective and thinking outside 
of the box. Uncommon thinking leads to 
uncommon action. For example, instead 
of sending that Christmas card before 
Christmas, consider sending a Thanks- 
giving card thanking your client for their 
business or a Valentine's Day card letting 
them know how much you love working 
with them. The smallest things that you 
and your organization do in that uncom- 
mon way will lead to your client gushing 
about the great experience and service 
you provided. 

Now that you have my key ingredients 
to create a memorable Ultimate Client 
Experience, how will you go about creat- 
ing that unique recipe for you and your 
organization? Every chef has his or her 
secret and, as with any great recipe, it 
takes practice along with some trial and 
errors. Be willing to accept the challenge, 
and sometimes frustration, along with the 
fun and excitement. Each step in discov- 
ering the right combination of Culture, 
People, Relationship Building, Client 
Understanding, and Doing Common 
Things in Uncommon Ways will lead you 
closer to the Ultimate Client Experience 
recipe best suited for your organization 
and clients — one that makes you stand 
out from others and keep your clients 
coming back for more. I 

Michelle Pope is COO at Atrion 'Network- 
ing Corp., a systems integrator and net- 
work services provider in Warwick, R.L 
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Agile evolves from XP to lean 



There can be little doubt that, in its ear- 
ly days, agile — a term coined in 
2001 — was only slightly different from 
Extreme Programming (XP). The agile 
practices that immediately sprung forth 
after the famous manifesto was signed 
were focused on the developer and the 
development process. TDD, refactoring 
and pair programming, for example, were 
among the earliest practices associated 
with agile — and they derive from XP. 

This was a natural affinity, as both 
approaches heavily emphasized the core 
value of adaptability to change. (The 
term agile, in fact, was chosen to com- 
municate this central orientation. Earli- 
er, Kent Beck's book on XP, "Extreme 
Programming Explained," was subtitled 
"Embrace Change," lest anyone should 
not understand the main point of XP.) 

As agile has moved gradually into the 
mainstream, various practices have 
enjoyed distinct waves of popularity. 
Refactoring was embraced early, even by 
non-agile shops. Then unit testing 
became a popular, widely discussed prac- 
tice. This segued into full TDD, which 
though still contentious today, is no longer 
viewed as fringe, but as a viable alterna- 
tive to standard code-first development. 

Pair programming, however, has yet 
to have its moment in the sun and might 



not for a long time, if ever. Likely, it will 
require some convincing studies that 
provide managers cover for putting two 
expensive developers on the task previ- 
ously undertaken by one alone. 

The baton was then passed to manage- 
ment and process areas, where continu- 
ous integration emerged as an increasing- 
ly mainstream practice. And over the last 
few years, it has established 
itself as a mainstream practice. 
More recently, Scrum has 
been a defining practice of 
agile shops. And with it, there 
has been a greater focus on the 
global process, not just on the 
coding and testing practices. 

Scrum and its planned 
short sprints are now familiar 
at many organizations, and will 
likely find more traction at tra- 
ditional shops. But it's the Kanban orien- 
tation, with its emphasis on continuous 
process instead of short intervals, that 
anchors agility's values in the enterprise. 

A recent conversation with representa- 
tives from Urbancode (one of the vendors 
of enterprise-scale development prod- 
ucts) about their experience inside large 
development organizations shows how 
this plays out. At these sites, the term 
"continuous integration" truly means 



Integration Watch 




"continuous" rather that what it's meant 
up until now: namely, a frequent but not 
continuous integration cycle. 

At these sites, integration happens 
without ceasing — one (or often several) 
instances of a build are in progress at any 
given moment. As soon as a build com- 
pletes, it immediately restarts. As a result, 
there can sometimes be thousands of 
agents simultaneously working 
on multiple builds of the active 
projects. 

The obvious question is 
why this manic building? 
There are several reasons. 
The primary driver is the very 
raison d'etre of continuous 
integration: early notification 
of code changes that break 
the build or make tests fail. 
At non-hyperactive agile 
shops, not all tests are run on every build 
in the continuous integration cycle. 
Some batteries of tests simply take too 
long to provide feedback, so they're run 
overnight and their results are delivered 
the next day. The new approach that I'm 
describing does, in fact, run the slow 
tests at the earliest opportunity. 

It also runs the build on all platforms, 
something that, again, is often postponed 
at many mainstream agile organizations. 



At these sites, the integration cycle will 
build and test the code on the primary 
development platform and repeat this 
process for the secondary platforms at a 
later point. In the new approach, every- 
thing is done on all platforms. 

This constant work has the additional 
benefit that it generates accurate statis- 
tics and metrics, which give managers 
and developers true, real-time data about 
project completion and project health. 

These new trends are pushing agile 
towards lean development. Continuous 
integration, especially at this constant 
pace, aims to reduce one of the key waste 
factors — a fundamental goal of lean soft- 
ware development — namely, the context 
switch. Immediate feedback reduces the 
time lost getting developers back to where 
they were when the error occurred. 

It also assures that another principle 
is met: Integrity is built-in. That is, the 
quality of the deliverable is frequently 
verified to the maximum extent that 
automation permits. Finally, the collec- 
tion of metrics supports another lean 
principle, namely, seeing the whole. 

It is clear that agile development is 
moving up the food chain from the 
developer to the manager. This is a nec- 
essary and encouraging step in agility's 
maturation. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his blog at 
binstock.blogspot. com. 
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7th Annual 

High Performance Computing 

ON WALL STREET Show and Conference 
September 20, 2010 (Monday) 

ROOSEVELT HOTEL, NYC Madison Ave & 45 St, next to Grand Central St 

Need for Speed, Low Latency, Cost Savings: Wall Street 
and the financial markets are looking for ways for 
traders to speed their orders to market. 

High Performance Computing, Linux, Low Latency, Visualization, Cloud, Grid, Blade, 
Cluster -the largest meeting of High Performance Computing in New York in 2010. 

This major HPC networking opportunity will assemble 800 Wall Street IT professionals at one 
time and one place in New York in September 2010. 

This HPC show will focus on speed, Low Latency, lowering computer costs. Catch the wave 
at our convenient and affordable New York marketplace. 

This show will cover High Performance Computing, High Frequency Trading, Low Latency, Vir- 
ilization, Cloud, Grid, Blade, Cluster and new strategies to put these technologies to work. 

Leading companies will be showing their newest 
products on-the-show floor live. 

Register in advance for the full conference pro- 




Wall Street IT speakers and Gold Sponsors will lead drill-down 
sessions in the Grand Ballroom program. 
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gram which includes general sessions, drill down sessions, an industry luncheon, coffee 
breaks, exclusive viewing times in the exhibits, and more. Save $100. $295 in advance. $395 
on site. 

Don't have time for the full Conference? Attend the free Show. Register in advance at 

Visit: www.flaggmgmt.com/hpc 

Show & Conference: Flagg Management Inc 353 Lexington Ave, New York, NY1 001 6 (21 2) 286 0333 flaggmgmt@msn.com 



FULCBLrt FUJITSU Solw Sustains Corvil 

CANONICAL SUPERMICR» ' 



ft 



M 

Syr^SE arista ScafeMP -!t_ 
SDTiiDK waters HEJTp MM HPC! 



I Global In vestment SECURTTES - 
I Technology MXJHTKfS 

I r side Market Data 



mm 



■'■wsm. 



www.sdtimes.com 



. Software Development Times . July 15, 2010 . 



COLUMNS 



33 



Users say the darnedest things 
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ow do you search for things?" asked 
the user. She stared at the screen 
for many seconds. 

"Okay" I said, "Thank you for — " 

"How do you search for things?" she 
asked again, irritated. 

I answered truthfully: "You use the 
'search' button." 

Without the slightest hesitation she 
responded, "I never would have guessed 
that." She then went on to explain how it 
should have been designed. 

We all think we're designers. Once I 
had a client who was obsessed with what 
he called "wasted space," which designers 
call "white space." As he kvetched about 
the horrors of using up screen space with 
a rocker button that cycled through color 
options, I said, "Well, we could have it so 
that when they clicked directly on the 
product, it cycled the colors." 

"Yes!" 

"Well. . . of course people aren't going 
to know that when they first come to the 
site." 

He responded instantly, with a voice 
as ominous as Darth Vader: "They will 
learn." 

Part of me loves user testing, the 
same part that enjoys visiting 
ThereIFixedIt.com and watching people 
destroying their trucks by felling trees 




onto them. I take comfort in believing, 
however briefly, that there are people 
more foolish than myself. I like to tell 
myself that I wouldn't need to be 
prompted to use a button marked 
"search." 

My major reaction to user testing, 
though, is often resignation. User testing 
invariably reveals distasteful 
work — layouts that need total 
reworking, dead-end naviga- 
tion paths, and corner cases 
that the library API doesn't 
cover. The interesting algorith- 
mic stuff that you developed 
while surrounded by a stack of * 
heavily annotated journal arti- 
cles and intently pored over on 
a statement-by-statement 
basis? That stuff works fine. 

Unfortunately, the temptation to skip 
user testing is often encouraged by 
clients. While experienced developers 
know that user testing will lead to a cer- 
tain amount of dismay, inexperienced 
clients dismiss user testing because 
they're invariably overconfident. I don't 
think many are as bad as my above-men- 
tioned client, who was confident that 
word would spread like wildfire that one 
could cycle colors by directly clicking on 
the product. More generally, the problem 
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is the opposite: Clients have seen so many 
mockups and prototypes and test versions 
that they cannot see it with fresh eyes. 

The days are gone when user testing 
was an expensive proposition involving 
one-way mirrors, dedicated video cam- 
eras and a shiny binder of results deliv- 
ered in just six weeks. Although such 
facilities still exist, a webcam 
and screen-recording soft- 
ware can provide similar data. 
More importantly, quantita- 
tive formal research is no 
longer considered the only 
valid, or even most valuable, 
approach. 

Steve Krug's "Rocket 
Surgery Made Easy" is a 
recent companion to his previ- 
ous book, "Don't Make Me 
Think!" Where his earlier work advocated 
for usability as a primary concern, "Rock- 
et Surgery" is a (very) brief primer on 
qualitative user testing. 

Qualitative user testing differs from 
formal research in a number of ways. The 
two most important are that it's invariably 
cheaper (just the logistics needed for valid 
research drive up costs significantly), and 
that it's much more pleasant for both user 
and tester. The tester is allowed to prompt 
the user or change an obvious trouble spot 
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Larry 
O'Brien 



without forcing a statistically significant 
number of failures. The goal is not to 
withstand the scrutiny of peer review, but 
to create a better user experience. 

Krug also focuses on doing as little as 
possible, which endears him to me. The 
distasteful work that user testing reveals 
is still going to show up, but he argues 
that "the least you can do" is often the 
best approach, which I'm willing to hear. 

Another type of testing I like is "A/B" 
testing, where you offer up alternative 
UIs and see which one produces better 
results. This is especially easy on the Web, 
at least for pages without extensive 
JavaScript dynamics. It's great to head off 
one of those endless talks about "What if 
the sidebar were wider?" with "Well, let's 
try them both and see what we get." 

A/B tools are rapidly proliferating; 
one that's broadly useful is Google's 
Website Optimizer, but development 
teams may prefer a platform-specific 
one, such as A/Bingo for Ruby on Rails. 

By the way, I put a counter in that 
color-cycling code and was shocked 
when I saw how frequently it was used. 
Then I saw that more than 90% of the 
color-cycling clicks were coming from 
three internal VPN addresses: the boss' 
desktop, his home machine and his lap- 
top. Some people never learn. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 
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Securing the applications 



Zeichick's Take 



IBM Rational has written a solid white 
paper on software security, focusing on 
improving code reviews. Although I rarely 
(very rarely) endorse a vendor white 
paper, this is one that's worth reading, and 
it can be found at www.sdtimes.com/ 
content/resources . aspx. 

Written in December 2009 by Ryan 
Berg, a senior security architect at IBM, 
the paper focuses on best prac- 
tices for examining code for 
security flaws, and then figur- 
ing out how to remediate those 
flaws. The paper, called "The 
Path to a Secure Application," 
breaks the vulnerabilities into 
five specific categories, each of 
which is examined in detail: 

• Security-related functions 

• Input/Output validation and encoding 
errors 

• Error handling and logging vulnera- 
bilities 

• Insecure components 

• Coding errors 

For each of those vulnerability cate- 
gories, Berg describes specific 
instances and offers a list of suspicious 
code behavior that might indicate 
problems. For example, for insecure 
components, he offers that you might 
have unsafe Java Native Interface 
methods, or unsupported methods. 
Suspicious behavior would include raw 
socket accesses, which could indicate 
possible backdoors; timer or get-time 




functions, which might mean triggers; 
or privilege changes, which might 
speak to unauthorized access levels 
within the code. 

What's nice about this paper is that, 
unlike many that cross my desk, Berg 
isn't setting up a paper tiger. He's not 
highlighting flaws so that he can say, 
"Oh, look, IBM sells tools to solve this 
problem, call us today." While 
IBM Rational does offer 
source-code scanning tools, 
I this white paper ain't peddling 
them. Rather, Berg is offering 
guidelines for making a QA 
checklist for reviewing source 
code for secure vulnerabilities. 
Nicely done! 

I wish more white papers 
were this good and this gen- 
uinely educational. 

CLOUD THIS, CLOUD THAT 

Is literally everything about the cloud? 
You'd think so, going by the chatter com- 
ing from the biggest players in the indus- 
try. It seems that every company that 
wants to talk is pushing something to do 
with cloud computing. New service offer- 
ings from hosting providers. New tools for 
optimizing the performance of applica- 
tions, or for making it easier to migrate, or 
for making cloud-based development 
more agile, and so on. 

The cloud sure is seductive. In our 
company, we're considering a migra- 
tion to cloud technologies within the 
next 12 months. BZ Media, the organi- 



zation behind SD Times, is a small 
company, and frankly I'd rather not be 
maintaining servers, either in-house or 
dedicated hardware in a collocation 
center. If the economics of cloud com- 
puting work out, and if reliability and 
scalability deliver what we need, then 
it's a good thing. 

Yet I'm puzzled. How much is cloud 
computing a software development 
conversation, rather than an operations 
conversation? Obviously the platforms 
are different: Windows Azure is differ- 
ent than Windows Server 2008. 
Microsoft's SQL Azure is different than 
Microsoft's SQL Server. The Java EE 
that VMware is pushing into Sales- 
force, corn's cloud isn't the same Java 
EE that's on your current in-house app 
server. Working with Amazon S3 is not 
the same as working with an EMC stor- 
age array. 

So yes, there's an undeniable learning 
curve ahead. But that's what you'd 
encounter in any significant server plat- 
form change, whether cloud, on- 
premise or collocated. 

Thus my confusion. How much does 
a software development team need to 
know about the cloud, beyond how to 
deploy to it and integrate applications 
with cloud-based apps? Tell me what 
you think at feedback@bzmedia.com. I 

Alan Zeichick is editorial director of 
SD Times. Follow him on Twitter at 
twitter coml zeichick. Read his blog at 
ztrek. blogspot. com. 



business Briefs 




HP's acquisition of Palm was expected to close July 1, after Palm's 
stockholders approved the deal at a meeting on June 25, accord- 
ing to a Securities and Exchange Commission filing. The acquisi- 
tion, announced in April, will merge the computer company with 
Palm, a provider of smartphones powered by the Palm WebOS 
mobile operating system. At the time of the initial announcement, 
the boards of directors of both companies approved the purchase 
of Palm for approximately US$1.2 billion, or $5.70 per share of 
Palm common stock in cash. According to HP, this agreement will 
enable the company to participate more aggressively in the fast- 
growing smartphone and mobile device markets, and it has plans 
to put Palm's WebOS on tablets, smartphones and Web-connected 
PCs . . . IBM has opened its largest development lab in North 
America. The company's new Mass Lab, with two sites in Massa- 
chusetts, has more square footage than Boston's Fenway Park. 
According to a statement, the 3,400 IBM employees will work to 
create software that manages some of world's most complex 
process and infrastructure problems, ranging from modernization 
and automation of railroads, water management, food traceability 
and healthcare. Additionally, developers are also advancing tech- 
nologies that focus on collaboration, social networking, cloud com- 
puting and analytics, as well as developing software for an increas- 
ingly global and mobile workforce . . . Alcatel- Lucent has acquired 
ProgrammableWeb, a provider of APIs for developers creating 
applications for the Web, mobile devices and other connected 



applications. Terms of the deal were not disclosed. Programma- 
bleWeb, which owns a repository of more than 2,000 Web APIs 
used by a community of hundreds of thousands of developers, will 
continue to operate as its own entity, according to an announce- 
ment of the acquisition. The deal gives Alcatel-Lucent's Applica- 
tion Enablement strategy greater strength by combining the net- 
work capabilities of service providers with the speed and creativity 
of Web development to give the end user a richer experience, the 
announcement said. John Musser, who founded Programma- 
bleWeb, will join Alcatel-Lucent but will continue to oversee the 
API repository . . . IBM is to acquire Coremetrics, a provider of 
Web analytics software. The financial terms of the agreement were 
not disclosed. According to a statement, the privately held compa- 
ny will expand IBM's business analytics capabilities by enabling 
organizations to use a cloud-based delivery model to gain real- 
time insight into internal consumer interactions and gain intelli- 
gence through social media networks to develop faster, more tar- 
geted marketing campaigns. IBM will continue to support and 
enhance Coremetrics' technologies and clients, and will integrate 
the company's approximately 230 employees into IBM. The deal is 
expected to close in the third quarter depending on regulatory 
approvals and the satisfaction of other customary closing condi- 
tions, according to a statement. Over the last five years, IBM has 
invested more than $11 billion in acquisitions to build out its Busi- 
ness Analytics and Optimization Consulting organization. I 



Events Calendar 



OSCON 




July 19-23 


(Open Source Convention) 


Portland, Ore. 






O'REILLY MEDIA 






www.oscon.com/oscon2010 






ACM SIGGRAPH 




July 26-30 


Los Angeles 






ACM SIGGRAPH 






www.siggraph.org/s2010 






SHARE 




August 1-5 


Boston 






SHARE 






www.share.org 






VSLive 




August 2-6 


Redmond 






1105 MEDIA 






vslive.com/events/vslive-summer-2010 




Agile 2010 




August 9-13 


Nashville, Tenn. 






AGILE ALLIANCE 






www.agile2010.org 






VMworld 


August 30-Sept. 2 


San Francisco 






VMWARE 






www.vmworld.com 






Intel Developer Forum 


Sept. 13-15 


San Francisco 






INTEL 






www.intel.com/idf 







JavaOne & Oracle Develop Sept. 19-23 

San Francisco 
ORACLE 

www.oracle.com/us/javaonedevelop 



Oracle OpenWorld 

San Francisco 
ORACLE 

www.oracle.com/us/openworld 



Sept. 19-23 



High Performance Sept. 20 

Computing Financial Markets 

New York 

FLAGG MANAGEMENT 

www.flaggmgmt.com/hpc 



ESC Boston 


Sept. 20-23 


Boston 




TECHINSIGHTS 




esc-boston.techinsightsevents.com 




STARWEST 


Sept. 26-0ct. 1 


San Diego 




SQE 




www.sge.com/starwest 




BlackBerry 


Sept. 27-29 


Developer Conf. 




San Francisco 




RIM 




www.blackberrydevcon.com 




iPhone/iPad DevCon 


Sept. 27-29 


San Diego 




BZ MEDIA 




iphonedevcon.com 




SPTechCon Boston 


Oct. 20-22 


Boston 




BZ MEDIA 




sptechcon.com 




Adobe MAX 


Oct. 24-27 


Los Angeles 




ADOBE 




max.adobe.com 





For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 



Software Development Times (ISSN 1528-1965) is published 24 times per year by BZ Media LLC, 7 High St., Ste. 407, Huntington, NY 11743. Periodicals postage paid at Huntington, NY, and additional offices. SD Times is a registered trademark of BZ Media LLC. All contents © 2010 BZ Media LLC. 
All rights reserved. The price of a one-year subscription is US$179 for subscribers in the U.S., $189 in Canada, $229 elsewhere. POSTMASTER: Send address changes to SD Times, PO Box 2169, Skokie, IL 60076. SD Times subscriber services may be reached at sdtimes@halldata.com or by calling +1-847-763-9692. 
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# Studio Enterprise 2010 

GelyuwUJay «t COMP0NENTONE.COM/HERE 

ComponentOne 

ComponentOne Sales: 1 .800.858.2739 or 1 .41 2.681 .4343 



Experience all the rich, new features of Visual Studio's latest release 
along with the ability to: 

• Improve your Web Form apps in minutes with AJAX 4.0 controls. 

• Style your Silverlight applications using visual brush creation 
and ComponentOne ClearStyle technology. 

• Add docking and floating capabilities to WPF windows. 

• Add More data visualization such as charts and gauges in 
WinForms and ASP.NET AJAX. 




ashDoarci 



Build More Powerful 
And Effective Dashboards, 



Faster 



Extensible And 

Customizable With 

An Open API 

Turn if. up I ^- ^ 




Silverlight Technology 



Full Scripting 

Capabilities With 

DundasScript™ 



More Data 
Visualization Options 



OLAP Support 



Dundas Dashboard is a highly extensible and customizable 
dashboard solution, that integrates easily into your ASP.NET, 
SharePoint, Silverlight or other web application. It provides you 
with a unified view of key metrics and a new level of strategic 
insight and decision-making. 



* 



Powered by 

Microsoft Silverlight 




j) Dundas 

J0r Data Visualization 



www.dundas.com/dashboard 

(41 6) 467-5 1 00 (800) 463-1 492 

Silverlight is a trademark of Microsoft Corporation in the United States and/or other countries. 




iPhone/iPad 
DevCon20lO 



San Diego 
Sept. 27-29, 2010 



Complete Class Listing 

Choose from more 
than 45 classes! 

■ Beginner to Expert 

■ Enterprise to ISVto Indie Developer 

PLUS! Marketing Track! 

Increase sales of your app in the app store! 

www.iphonedevcon.com 






Letter from the Chairman 

Dear Colleague, 

Yes, you can build, market and sell an app for that! 

Software development for Apple's mobile platforms is hot hot hot. 
With more than 50 million iPhones sold, along with 35 million iPod 
touch devices and hundreds of thousands of iPads, there are oppor- 
tunities for every developer, every marketer, every entrepreneur, 
every ISV and every enterprise IT professional. 

Come to iPhone/iPad DevCon to learn how to 
succeed with your mobile apps development, 
deployment and marketing. 

iPhone/iPad DevCon is focused 100% on 
mobile apps development. Produced by BZ Media — publishers of 
SD Times, the newspaper for the software development industry — 
this is the most info-packed, most practical mobile-development 
conference you'll attend this year. 

At iPhone/iPod DevCon, you'll be able to choose from dozens of work- 
shops and technical classes to customize your educational experience. 
Come and learn what fits your needs, as our sessions are organized 
into four tracks suitable for you and everyone on your team: 

iPhone/ iPad Developer Essentials: These technical classes/work- 
shops are for all iPhone and iPad app developers, and cover all pro- 
gramming topics. 

Spotlight on iPad: These technical classes/workshops cover the 
specifics of migrating and creating apps for the new iPad 

Spotlight on Enterprise Apps: These technical sessions cover topics 
specific to developing apps for employees, business customers and 
partners, such as back-end integration corporate datacenter com- 
munications, ERP or CRM systems. 

Spotlight on App Marketing: These non-technical 
classes/workshops are for business owners, entre- 
preneurs and marketers, including how to maxi- 
mize sales through Apple's App Store. 

iPhone/iPad DevCon is filled with technical 
sessions — but that's not all. In our exhibit hall, you'll learn about the 
best tools, services and resources for Apple mobile apps developers. 
Mingle and network during coffee breaks and at our big evening 
reception. There's more, much more... this is the conference you 
won't want to miss. 

Join us for three days in San Diego and learn from the brightest 
minds in the iPhone/iPad development universe! I'll see you there! 



Alan Zeichick 
Conference Chairman 
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Event Schedule 

iPhone/iPad DevCon At-A-Glance 
Sunday, Sept. 26 

4:00 pm - 7:00 pm Registration Open 



Monday, Sept. 27 

7:30 am - 7:00 pm Registration Open 

7:30 am -8:30 am 

8:30 am- 10:00 am 

10:00 am- 10:15 am 

10:15 am- 12:00 pm 

12:00 pm- 1:30 pm 

1:30 pm -3:00 pm 

3:00 pm - 3:15 pm 

3:15 pm- 5:00 pm 

5:15 pm-6:30 pm 



Continental Breakfast 

Morning Workshop 

Coffee Break 

Morning Workshop (continued) 

Lunch Break 

Afternoon Workshop 

Coffee Break 

Afternoon Workshop (continued) 

Lightning Talks and Pizza 



Tuesday, Sept. 

7:30 am - 7:00 pm 

7:30 am -8:30 am 

8:30 am - 9:45 am 

10:00 am- 11:00 am 

11:00 am- 11:15 am 

11 :15 am -12:30 pm 

12:30 pm -2:00 pm 

2:00 pm -3:1 5 pm 
3:15 pm-3:45 pm 

3:45 pm - 5:00 pm 
5:1 5pm -6:45 pm 



28 

Registration Open 
Continental Breakfast 
Technical Classes 100 
Mike Lee Keynote 
Coffee Break 
Technical Classes 200 
Lunch Break 
Tabletop Exhibits Open 
Technical Classes 300 
Coffee, Ice Cream, 
Tabletop Exhibits Open 
Technical Classes 400 
Attendee Reception, 
Tabletop Exhibits Open 



Wednesday, Sept. 29 

7:30 am - 4:00 pm Registration Open 

7:30 am - 8:30 am Continental Breakfast 

8:30 am - 9:45 am Technical Classes 500 

1 0:00 am - 1 1 :00 am Aaron Hillegass Keynote 

1 1 :00 am - 1 1 :1 5 am Coffee Break 

1 1 :1 5 am - 1 2:30 pm Technical Classes 600 

1 2:30 pm - 1 :30 pm Lunch Break 

1 :30 pm - 2:45 pm Technical Classes 700 

2:45 pm - 3:00 pm Coffee Break 

3:00 pm - 4:1 5 pm Technical Classes 800 

4:1 5 pm Conference Closes 
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Keynotes 




Mike Lee 

Tuesday, September 28 
10:00 am- 11:00 am 

Mike Lee, the world's toughest pro- 
grammer, is the founder and CEO of 
United Lemur, a philanthropic revolu- 
tion disguised as a software company. 
Mike also cofounded Tapulous, whose titles include Tap Tap 
Revenge and Twinkle. Prior to iPhone, Mike cut his teeth and 
won an Apple Design Award at Seattle-based Delicious Monster 
Software. 

Mike is originally from Honolulu, is a popular blogger and 
occasional pundit, and has been seen on twitter as bmf. His last 
known day job was as a Senior Engineer at a very large company 
in Cupertino marketing magical products. 




Wednesday, September 29 

Aaron Hillegass Keynote • 1 0:00 am - 1 1 :00 am 



Aaron Hillegass 

Wednesday, September 29 
10:00 am- 11:00 am 

Aaron Hillegass is the CEO of Big Nerd 
Ranch, which he founded in 2001 . He 
started programming at the age of 1 
in the basement of the Oregon Muse- 
um of Science and Industry. He was a a developer trainer at NeXT 
in 1 995-1 997. NeXT was bought by Apple, so he left in June of 
1 997 to create ClassMAX.com, the search engine for classes and 
seminars. After leaving ClassMAX during the late 1990s, Aaron 
went on to become one of the best WebObjects programmers on 
the planet; he was especially known for his skill deploying 
WebObjects applications. In 2000 Aaron was asked to teach 
Apple engineers how to write apps for Mac OS X. 

In 2007, MacTech named Aaron one of the top 25 most influen- 
tial people in the Mac community. An accomplished speaker, 
Aaron has lectured at Apple's Worldwide Developer Conference 
(WWDC), ApacheCon, and C4. He also gave the keynote at the 
"Voices That Matter" iPhone Developers Conference in 2009. 

Aaron is also a best selling author. "Cocoa Programming for Mac 
OS X" was published in December of 2001. "Cocoa Programming," 
now in its third edition, is widely considered the Bible in the indus- 
try. He is also the co-author of "Core Mac OS X Programming," 
which was later renamed "Advanced Mac OS Programming." 
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Special Events 






Monday, September 27 

Sponsor Lightning Talks and Pizza • 5:1 5 pm - 6:30 pm 

Learn something new in a handful of short, targeted talks. 

Tuesday, September 28 

Mike Lee Keynote • 1 0:00 am - 1 1 :00 am 



Exhibit Hall • 12:30 pm - 6:45 pm 

Come visit the growing and 
evolving network of technical 
experts in our Exhibit Hall. 



Attendee Reception • 5:15 pm - 6:45 pm 

Open to all attendees, the reception 
offers a chance to network with fellow 
professionals in a casual atmosphere. 






iPhone/iPad 
DevCon20lO 



Workshops Monday, Sept. 27 



Full Day Workshops 
8:30 am - 5:00 pm 



Coming Up to Speed on 
Objective-C and 
Cocoa Fundamentals 
By Daniel Steinberg 

You already know how to program and you have 
a great idea for an iPhone or iPad app. So, how do 
you make the transition to this new platform? You 
need to learn the language and key techniques of 
programming for iPhone 4.0 and then you'll be off 
and running. We'll begin this hand-on full-day work- 
shop with an introduction to Objective-C, the lan- 
guage of iPhone OS. You'll learn to create objects in 
code, send messages between them, and manage 
the memory. 

Once you've mastered the square brackets and 
colons you'll learn to create and connect objects 
without writing any code. We'll spend the second 
portion of the workshop learning to use Nibs — a 
freeze dried graph of objects. You'll create outlets to 
communicate from your code to the nib and actions 
to communicate in the other direction. 

By the end of the day you will understand the key 
patterns used in iPhone development. You'll create 
view controllers whenever you need to present a 
new screen. You'll understand the role of the File's 
Owner and create nib files ruled by view controllers. 
You'll find yourself reaching for delegates rather than 
subclasses. In short, you'll be an iPhone developer. 

You will need the latest public version of the 
development tools and iPhone OS installed on 
your Mac. 

From JavaScript to iPhone SDK 

Programming 

By Danny Goodman 

JavaScript is arguably the most popular pro- 
gramming language in use today, having attracted 
legions of Web content authors and designers to 
produce dynamic Web pages that simulate applica- 
tions — Web apps. Because many JavaScript pro- 
grammers came to programming without formal 
computer-science training, making the transition to 
creating native iPhone OS apps (with the associated 
benefits of programming the hardware and built-in 
apps) means learning a great deal of new material 
even to get started. 

This workshop prepares you to meet the chal- 
lenges of learning C, Objective-C, the Xcode inte- 
grated development environment, and Cocoa 
Touch programming for the iPhone and iPad. Learn 
how to convert your current thinking about pro- 
gram design and structure to ways best suited for 
creating native iPhone/iPad apps in the enterprise 
or for sale in the App Store. 

You'll learn how to manage projects in Xcode, 
and the workshop explains Objective-C terminolo- 
gy for classes, delegates, the model-view-controller 



pattern, and other concepts that most entry-level 
iPhone programming instructions assume you 
already know. Take away the basics of data typing, 
pointers and memory management issues — con- 
cepts alien to the JavaScript world. At the end, you'll 
receive Objective-C and Cocoa Touch recipe equiv- 
alents for familiar JavaScript language tasks. 

Succeed with iPhone/iPad Apps 

Marketing 

By Griffin McGrath 

This full-day class (configured as two half-day 
workshops) will focus on three areas of the app 
economy: specific "critical success factors" of top- 
ranked iPhone applications in the iTunes App 
Store, building a business plan for iPhone/iPad 
apps, and best practices in marketing your apps for 
greater success. 

Using both quantitative and qualitative data, 
this session will help developers and business exec- 
utives more fully understand what drives installa- 
tions and repeat use of their products. By under- 
standing what application consumers find the most 
compelling about their apps, you can tailor your 
products to enhance their market position and 
increase downloads and usage. 

The findings come from an extensive research 
study conducted at Quinnipiac University that 
evaluated nearly 800 applications from almost all 
categories of the iTunes App Store. By analyzing 
individual application rankings, numbers of 
reviews, release dates and numbers of versions, 
and comparing them to third-party reviews by con- 
sumers and independent reviewers, the research 
team has found some unique insights into con- 
sumer behavior. 

Before you create an app, though, it is important 
to understand the business planning that is 
involved. It is no longer enough to code an app and 
release it hoping for a huge hit. There are strategies 
for everyone to consider if they wish to make it to 
the top of the more than 200,000+ applications 
now available in the App Store. Learning how to 
properly plan for success and how to market an app 
is key to getting downloads. 

You'll learn how to leverage the unique data sets 
that the researchers have accumulated, allowing 
you to tailor your business plans and products to 
better fit the "success" model of top developers. 

Half Day Workshops 
8:30 am- 12:00 pm 

Three Hello Worlds in Three Hours 
By Joe Pezzillo 

In this hands-on workshop, you'll learn how to 
start with iPhone development using the classic 
"Hello, World" example using three standard iPhone 
project types. 

The first is a basic UlView based project that 
starts with an empty canvas. You'll learn about 



using Xcode project templates, using Interface 
Builder and connecting Ul objects to your code, 
basic "Caveman Debugging" techniques, and some 
gentle general introductions to Cocoa, as well. 

The second project is based on the workhorse 
UlTableView class, and moves you up the learning 
curve with introductions to the Delegate and 
DataSource design patterns, the use of dot syntax 
and another workhorse class, NSString. 

The final example in the workshop is perhaps 
the most powerful class in all of Cocoa, UlWebView. 
Here, you'll learn just how easy it is to load a URL in 
a fully rendered web view in your app to start 
unleashing the power of WebKit. 

Along the way you'll learn about memory man- 
agement, collections and Cocoa Foundation frame- 
works, simulator vs. device debugging, and more. 

Time permitting, the instructor will present "Top 
10 Tips & Tricks for New Cocoa Developers," a pres- 
entation that will further accelerate your scaling the 
"learning cliff." This workshop presumes you have 
some previous programming knowledge, but are 
just getting started with your very first iPhone and 
Xcode projects. 

1:30 pm -5:00 pm 

Using Core Animation to Build 
Complex and Attractive Interfaces 
By Nathan Eror 

Core Animation plays an integral role in the 
iPhone user interface and is responsible for all 
drawing in iPhone OS. Careful use of animation can 
make even an average app a joy to use. In this work- 
shop you will learn how to effectively apply the fea- 
tures of Core Animation in your own apps. 

After an introduction to the principles behind 
Core Animation, you will learn how it is used in UIKit. 
Then, we will dig into the meat of Core Animation 
and how to use it effectively. Through multiple exam- 
ples, you will learn how to tame some of the com- 
plexities of the Core Animation API. By the middle of 
this workshop, you will be comfortable with Core 
Animation, and your apps will run more smoothly 
and be more visually appealing. 

Core Animation puts a tremendous amount of 
graphical power at your fingertips. You can accom- 
plish quite a bit with very little effort, but once you 
decide to step out of Apple's pretty little sandbox, 
things get more complicated. In the second half of 
the workshop, we'll will get out our tools and make 
that sandbox a lot bigger. After an overview of the 
key pieces of the Core Animation API, we will create 
utility code to help us build complex, interdepend- 
ent animations. This code will help us manage dele- 
gate callbacks, complex grouped animations, 
chained sequences of animations and much more. 
Before you know it, your Ul elements will be bounc- 
ing, popping, fading and sliding on the screen with 
a single method call. 
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Technical ClaSSeS Tuesday, Sept. 28 



1 00 CLASSES » 8:30 - 9:45 am 

Optimizing Data Caching 

for iPhone App Responsiveness 
By Jonathan Saggau 

Users of native iPhone apps, even those pulling 
data from "the cloud" expect a snappy experience. 
The "Death by a Thousand Paper Cuts" of a slow user 
interface is possibly the quickest way to disappoint. 
Learn how to apply embedded systems caching 
tricks to optimize the user experience within exam- 
ple apps while balancing the trade-offs as a result of 
caching data. 

Graphic Design Techniques 

for Developers 
By Robert Strojan 

So you've read Apple's Human Interface Guide- 
lines, developed the ultimate navigation hierarchy, 
and refined your user interface for maximum usabil- 
ity. Now, how do you finalize your Ul with the type of 
shine and polish that will set it apart? How can you 
create the beautiful tactile buttons, embedded text 
and glossy toolbars typical of Apple's iPhone apps? 

In this session, we'll look at popular design ele- 
ments in well-designed iPhone apps, and you'll learn 
techniques to recreate them using the freely distrib- 
uted GNU Image Manipulation Program (GIMP). This 
will be a hands-on session. Come with GIMP {link to 
www.gimp.org} installed and follow along. 

Making and Marketing Apps 

That Succeed 

By Michael Schneider 

Achieving consumer awareness and sales 
longevity for your iPhone app requires a lot of 
organization and some strategic planning. This ses- 
sion will show you how to incorporate marketing 
and business savvy into your design and develop- 
ment process, giving your app the best possible 
chance of succeeding in the App Store. In this ses- 
sion, you will learn: 

• How to select and perfect the best icon and title 
for your application 

• How to build mechanisms for users to communi- 
cate with you from within your apps 

• More effective ways to distribute promotional 
codes for your applications (and how best to use 
those codes) 

• How to use affiliate links to track the sources of 
your sales 

• Ways to build a community around your apps 

• The pros and cons of various pricing strategies 

Using CoreLocation for GPS 

and Magnetometer 
By Aaron Farnham 

The iPhone has enable a new class of application 
that is both aware of a user's location and even 
which way the user is facing. In this class, you'll 



study code and learn how to develop software that 
leverages the GPS and magnetometer devices in 
the iPhone. We will cover the APIs, common design 
implementations and have time for questions. 

Mastering iPhone OS 4.0: 

What's New, What's Changed, Part 1 
By Daniel Steinberg 

The newest version of Apple's iPhone operation 
system is coming soon. In this two-part class, we 
will dive deep into the new and changed function- 
ality. Obviously, we can't say more, because iPhone 
OS 4.0 is under NDA... but use your imagination! 

200 CLASSES » 1 1 :1 5 - 1 2:30 am 

Mastering iPhone OS 4.0: 

What's New, What's Changed, 

Part 2 

By Daniel Steinberg 

The newest version of Apple's iPhone operation 
system is coming soon. In this two-part class, we 
will dive deep into the new and changed function- 
ality. Obviously, we can't say more, because iPhone 
OS 4.0 is under NDA... but use your imagination! 

Is It Real or Is It Virtual? 

Augmented Reality on the iPhone 

By Jonathan Saggau & Jonathan 
Blocksom 

With the new camera, compass and processing 
power of the iPhone 3GS and newer devices, it's 
possible to integrate the iPhone with even more of 
your users' everyday life using Augmented Reality. 
In this class, you'll walk you through a demo appli- 
cation for finding your hotel in a strange city. Learn 
how to use the orientation and magnetometer APIs 
to place virtual tags on objects in the real world. 
Depending on weather, we might even head out- 
side to chase down that hotel! 

Push It Up: Mastering Apple's 

Push Notifications Service 
By Joe Pezzillo 

This class will walk you through how and why to 
add push notifications to your application and 
what's required on the server-side, with plenty of 
working sample code and specific examples to 
guide you through every step of the process. 

iPhone Development for .NET 

Developers 
By Ben Scheirman 

Just because you spend your day in Visual Stu- 
dio, doesn't mean you can't build iPhone apps with 
the cool kids! In this session, you'll learn all about 
Objective-C, Apple's Xcode IDE and the iPhone SDK 
for building iPhone applications. Your instructor has 
a strong background in .NET development, and will 



compare and contrast the vastly different styles of 
development. 

By the end of the session, you will have a solid 
understanding of how Objective-C is different from 
C#, how Xcode is different from Visual Studio, and 
ultimately how writing apps for the iPhone is prob- 
ably unlike anything you've done before. 

BlockHead: Blocks in Objective-C 
By Jeff Biggus 

Blocks are coming to the iPhone and iPad! This 
session will go over how blocks work in Objective-C 
2.0 to get developers ready to make use of them in 
both a manual and garbage-collected environ- 
ment. New design patterns are open to those who 
know how to make use of blocks. Now that more- 
powerful mobile systems are becoming available, 
the ability to make use of this form of modularizing 
code will become more and more important. 

This new addition to C (and proposed for the C 
standard) is one more layer in what's becoming a 
large set of syntaxes fitting within one environment. 
It is the goal of this session to get developers fluent 
in blocks and to see beyond the syntax to the code 
designs that are made possible. 

You will be given sample code of varying 
degrees of complexity and in a number of different 
use cases, comparing how tasks would be done 
with and without using blocks. 

300 CLASSES » 2:00 - 3:15 pm 

No Objective-C Required! Use Your 

Web Skills to Develop iPhone and 

iPad Apps 
By Jeff Haynie 

HTML, CSS and JavaScript are quickly becoming 
the development languages of choice for creating 
native iPhone and iPad applications. By using open- 
source platforms, Web developers can create apps 
for iPhone, Android and BlackBerry using a single 
codebase. 

In this session, you will learn: 

• All open source is not alike: How to select an open- 
source mobile development platform. 

• How to use mobile APIs for geolocation, video and 
social networking. 

• How to build a native user interface for iPhone 
applications. 

iPhone/iPad Networking with 

NSStream 

By Aaron Farnham 

NSStream provides a powerful abstraction for 
communication with networks of any type. In this 
class you'll learn how to set up NSStreams and use 
them without slowing down your application's user 
interface. We will also study examples of how to col- 
lect data in realt ime with NSStreams and cover les- 
sons learned for usage on the iPhone and iPad. 



5 • Sept. 27-29, 201 • Hyatt Regency Aventine • San Diego, Calif. • ww.iphonedevcon.com 



iPhone/iPad 
DevCon20lO 

0£ji 



Technical ClaSSeS Tuesday, Sept. 28 



300 CLASSES (cont'd) • 2:00 - 3:1 5 pm 400 CLASSES • 3:45 - 5:00 pm 



Dynamic App Data Updates via 

NSURLConnection 
By Danny Goodman 

Come explore the Cocoa Touch NSURLConnec- 
tion class as a way to have an app dynamically 
retrieve updated data from a server behind the 
scenes. Updated data may be in the form of XML 
data (e.g., frequently-changing lookup tables), 
HTML (e.g., periodic news bulletins and tips for 
users), images, or other data types. 

You'll learn how to design apps around the 
NSURLConnection class and its delegate methods 
as a way to eliminate the need to submit endless 
updates to the App Store. It allows a developer to 
keep an app's content fresh as often as needed. The 
class also demonstrates how to use network band- 
width and local caching most efficiently to prevent 
unnecessary downloads of server data that hasn't 
changed since the previous app launch. Included 
are demonstrations of blending these download 
techniques into user interfaces of actual iPhone 
apps currently on the App Store. 



TANSTAAFL: Using Open-Source 

iPhone Ul Code 
By Jonathan Saggau 

Most every iPhone developer has said some- 
thing like this at one point or another: "If only Apple 
would release their photo viewer component, or 
perhaps their calendar Ul, or maybe their coverflow 
view, then life would be so much easier." Happily, 
several open-source developers have concluded 
the same and written code so we don't have to. 

In this class, you'll learn all about open-source 
libraries that mimic much of the Ul that you see in 
Apple's own iPhone applications. Learn the ins and 
outs of these components and leave with code that 
uses the image views available from the Three20 
framework, an open-source coverflow view called 
OpenFlow, and a recreation of Apple's calendar 
view called Kal. Apple has built it, the community 
has rebuilt it, and now you can use it in your app. 




Connecting Apple's iPhone to 

Google's Cloud 

By Noah Gift & Jonathan Saggau 

Cloud computing and software development for 
handheld devices are two very hot technologies 
that are increasingly being combined to create 
hybrid solutions. In this class, you'll learn how to 
connect Google App Engine (Google's cloud com- 
puting offering) with the iPhone, Apple's mobile 
platform. You'll also see how to use the open-source 
library, TouchEngine, to dynamically control applica- 
tion data on the iPhone by connecting to the App 
Engine cloud and caching that data for offline use. 

The iPhone OS Audio Landscape 
By Robert Strojan 

Can you hear me? Can you hear me now? Learn 
the ins and outs of audio on the iPhone as we look 
at Audio Sessions, audio formats, and what you 
should be thinking about before ever playing any 
audio. Then we'll explore each of the iPhone's audio 
APIs and when to use them. 

We'll analyze "Hello, World" code with the easy- 
to-use AVAudioPlayer as well as the game design- 
er-preferred OpenAL. Then we'll spend significant 
time navigating through the dark, mysterious 
world of Audio Units to start you on your way to 
developing powerful audio-centric apps. 

Contracts, Licenses, Intellectual 

Property and Other Legal Issues 
By Michael Schneider 

iPhone development presents an unprecedent- 
ed opportunity for individuals and small companies 
to bring products to market, but independent 
developers often don't consider the legal issues 
involved with their business until it is too late. This 
session is an overview of legal issues you'll face 
when creating and bringing applications to market. 

You'll learn about the intellectual property pro- 
tection available for your applications, and which 
methods of protection make the most sense in the 
context of mobile application development. We will 
also discuss the importance putting solid contracts 
in place with your employees and contractors to 
ensure that you get the rights you need in their 
work product. Other topics include, when to create 
your own end user license agreement and the steps 
to take when you believe someone has infringed 
your intellectual property rights. 
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Custom UlView Drawing with 

CoreGraphics 
By Michael Gile 

Come learn about low-level drawing with the 
Core Graphics framework. Core Graphics provides 
the fundamental drawing capabilities used to cre- 
ate path-based drawings as well as many other 
transformations and screen output capabilities. 
You'll learn how to create custom UlView subclasses 
to take responsibility for drawing their own on- 
screen rendering. In addition, we will cover meth- 
ods to create aesthetically pleasing visuals such as 
shine effects and gradient path fills. 

From the Trenches — Lessons 

Learned in Enterprise iPhone 

Development 
By Joe Pezzillo 

Joe Pezzillo spent 1 8 months developing iPhone 
applications for a Fortune 100 financial services 
company and offers a baker's dozen hard-won les- 
sons that'll help you and other enterprise develop- 
ers who are working in this rapidly growing field. 
He'll cover topics including: 

• Staffing, division of labor and other personnel 
issues 

• Project management, setting realistic expecta- 
tions and justifications 

• Code architecture choices, frameworks & libraries, 
SCM and other resources with a specific recom- 
mendation for application development 

• Certificates, SCEP and provisioning 

This session does not present any code, instead 
is intended as a discussion of enterprise deveop- 
ment topics, although it does include mentions of 
some specific libraries that may make your life easi- 
er as an enterprise developer. 
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iPhone SQLite Techniques 
By Ben Scheirman 

If you're building a data-driven application on 
the iPhone/iPad, chances are you'll have to leverage 
SQLite. SQLite is a handy single-user relational data- 
base and gives you plenty of control and perform- 
ance with even large datasets. Unfortunately, the C- 
language API makes working with SQLite difficult. 

In this session, we will cover the basics of SQLite, 
how to deal with writable databases, and how to 
quickly and effectively query and store data using a 
higher-level API. Finally, you will learn how to man- 
age a growing and changing application by imple- 
menting database migrations to allow your data- 
base schema to evolve. 

This will be a heavy code presentation; all the 
code and materials will be provided. 

500 CLASSES » 8:30 - 9:45 am 

Mobile Data Synchronization with 

Any Database 

By Lee Barney 

iPhone applications can easily store data using 
either the core Data framework or by directly inter- 
acting with the SQLite database engine. This data 
can then be heavily used without delays involved in 
passing information back-and-forth between the 
device and a remote database. How then can data 
be kept in sync if it needs to exist on the device and 
a remote database? What if you don't need all of the 
data found in the database to exist on the device? 

This class helps you design and implement a 
synchronization utility that will work with the data- 
base management system of your choice. It could 
be Oracle, MySQL, Sybase or some other database. 
It could even be something completely different 
such as XML or other textual flat files. The data 
structure on the device won't even need to match 
the remote data structure. 

All of this can be done to create an easy-to-use 
sync utility you can use in any of your applications. 

Moving to the iPad: What You 

Need to Know 
By Daniel Steinberg 

The iPad is not just a bigger iPhone. Sure, there 
is a great deal of overlap in the APIs and coding 
techniques but the devices are fundamentally dif- 
ferent and you shouldn't just port your iPhone apps 
to it's bigger relative. This session will look at the dif- 
ferences in targeting the two devices and will high- 
light APIs and techniques that are particularly 
important on the iPad. 



Core Data tips and Tricks 
By Saul Mora 

Core Data isn't your father's database. In fact, 
you're not really supposed to think about it as a 
database. We'll go over the stack, what each layer 
means to you, and how to get up and running with 
Core Data fast and easy! We'll also cover some sim- 
ple debugging tips, optimizing your lookup per- 
formance, and how to properly deal with multi- 
threading. 

Marketing in the Social Media 

APPmosphere 
by Bobby Emamian 

After creating a few iPhone apps in the past year, 
it's amazing to look back and see what it took to 
make them happen. Not only are there creative and 
technical aspects involved, but the marketing is 
also crucial. It is important to bring value to the user 
in a way that engages them in order for them to 
become brand enthusiasts. 

With Facebook just releasing its new API, the 
way applications are built and marketed will forev- 
er change. Thus, it will be great to talk about the 
features and aspects of how incorporating Face- 
book into the applications will help generate viral 
campaigns. 

You'll learn from two case studies in this class, the 
BIG EAST conference basketball tournament app 
and the official CC Sabathia iPhone app. You will 
learn the possibilities that social media opens up 
when marketing their apps. Looking down one 
avenue is very easy to do, however. Mashing up 
what is available in the social media space is when 
viral campaigns are made. 

File Systems Security with 

iPhone OS 4.0 
By Michael Gile 

iPhone OS inherits a large set of robust security 
and encryption capabilities from its Unix heritage. 
In this class you'll learn about the current state of 
security in the latest version of iPhone OS. From the 
storage of network credentials in Keychain to the 
low-level cryptographic libraries, certificate man- 
agement and file encryption. We'll also go into the 
new features of iPhone OS 4.0 for file protection and 
big integer capabilities that should be of interest to 
any security-minded developer. 

Designing iPad Applications for 

the 21 st Century 

By Mike Lee 

The introduction of the iPad has revolutionized 
how people think about, and interact with, comput- 
ers. Even in a post-iPhone world, these waves of 
change radiate into the very fabric of our work as 
the arbiters of software. 

Learn about the emerging principles of software 



design that contribute to the unique "iPadness" of 
software on the platform, and different ways of 
thinking necessary to apply those principles to your 
own work. 

We'll examine some applications from the App 
Store and discuss how well (or how poorly) they 
demonstrate these principles — or bring your own 
pending masterpiece and take the hot seat for a 
priceless (if humbling) peer review. 

600 CLASSES » 1 1 :1 5 - 1 2:30 pm 

TheTricorder is Here: Math and 

Science on the iPhone/iPad 
By Jeff Biggus 

This session will go over the many frameworks 
and libraries available to iPhone and iPad develop- 
ers for doing math and science. In addition to third- 
party frameworks, Apple is also about to make 
available the Accelerate framework in iPhone OS 
4.0, a powerful hardware-accelerated mathematics 
library. Useful for applications that are not them- 
selves math- or science-oriented, such as graphics 
processing, presentation and manipulation, game 
Al, and large data set processing, this background 
can make whatever app you're working on gain 
new levels of polish and functional depth. 

The first thing that Apple pointed out to develop- 
ers about the new iPhone OS 4.0 infrastructure was 
the Accelerate framework. It's a valuable resource that 
they are making available, but is generally an 
unknown quantity for most developers. This session 
will try to make it more approachable by going over 
several use cases and breaking down the code to its 
bare essentials. 

Many high-quality third-party frameworks and 
libraries are also available to enhance doing scien- 
tific and mathematical work on the mobile plat- 
forms (and more besides now that such things as 
blocks are available). Several such frameworks will 
be presented. 

The Science of Making a 

Successful Free App 
By Nitin Chitkara 

How can an indie developer succeed in an over- 
crowded App Store? How can you differentiate your 
app from the rest? App success is not based on pure 
luck; there is a science to it. 

With over 75% of the apps being paid, it's much 
easier to get to the top of the free app market. Get 
the inside scoop from one of the industry experts. 
See case studies of developers who have gone from 
a paid to free model, and how they used our analyt- 
ics data to enhance their app. Learn the characteris- 
tics of a successful free app, how to effectively drive 
revenue with a "freemium" model, and when and 
why an app should just go the paid route. 

Apps that succeed all have a few things in com- 
mon. Get the tricks of the trade and insight into the 
app market that you can't get anywhere else! 
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600 CLASSES (cont'd) 
11 :15 am -12:30 pm 



Advanced Core Data: Building Your 

Own NSFetchedResultsController 
By Marcus Zarra 

In this talk, we will start with discussing the 
NSFetchedResultsController and how to properly 
apply it to a UlTableView. As part of that opening dis- 
cussion, we will be walking through some of the lim- 
itations and edge cases that have come up while 
using the NSFetchedResultsController. 

In the second part of this session, you'll learn 
how to develop your own replacement for the 
NSFetchedResultsController, and how to use that 
expanded functionality to provide a more robust 
solution for monitoring data changes in the Core 
Data stack and react to those changes. As part of 
this section, we will discuss using Core Data in a 
multi-threaded situation and how that impacts the 
monitoring of data. 

Ship Your App Now by Creating 

Hybrid Applications 

By Lee Barney 

Learning Objective-C can be a major hurdle for a 
beginning iPhone or iPad application creator. One 
solution that allows you to get your apps out the 
door and helps you learn Objective-C at the same 
time is to create a hybrid application. Hybrid appli- 
cations use HTML, JavaScript and CSS for much if not 
all of your application display and logic. There are 
several hybrid application libraries available online, 
both open and free as well as closed and for cost. 

This class helps you create your hybrid applica- 
tion using the first open-source, free and most high- 
ly developed hybrid application framework: Quick- 
Connect. A few of the ideas you will learn to imple- 
ment are: 

• Storing data on the device 

• Using HTML 5 to animate your interface 

• Displaying Maps in your application 

• Using audio and Video 



Building Killer Universal Apps for 

iPhones and iPads 
By Daniel Steinberg 

There are iPhone apps, iPad apps, and apps that 
run on both. In this session you'll learn to take an 
iPhone app and convert it to a Universal app that 
runs on both the iPhone and iPad. Sure, your users 
can just run your iPhone app on the iPad but it just 
won't look right. We'll cover the key steps to pro- 
ducing a single binary that looks and feels right on 
each device. 

700 CLASSES « 1 :30 - 2:45 pm 

iPhonify Your Web App: 

Understanding iPhone Web 

Development 
By Chris Bannon 

The iPhone has become a common device in 
the hands of your end users. You'll learn every- 
thing you need to know in order to build Web 
applications targeted for the iPhone. This session 
will give you an overview of the iPhone in general, 
including the specs, Ul and behavior. You'll learn 
simple tips to enhancing your current Web apps 
for the device and also look at building an iPhone- 
specific website. 

Plus, we will take a look at some popular 
iPhone sites and the tools you can use to build 
them. After a walk through storyboarding an 
iPhone Web app as a concept and developing it 
together, you will be ready to extend your site to 
the iPhone with confidence. 

Everything You Wanted to Know 

About UlTableView 
By Aaron Farnham 

UlTableView is one of the key Ul idioms Apple 
has created for iPhone OS. It is used for a large vari- 
ety of Ul activities that range from displaying lists of 
data to presenting settings controls. Understanding 
how to take advantage of UlTableView effectively is 
one of the keys to creating great iPhone applica- 
tions. In this class you'll learn how to setg up a table 
view with a UlViewController and then explore each 
of the APIs. Finally we will look at some alternative 
methods to creating table rows. 



Unit Testing That Doesn't Suck 
By Saul Mora 

Unit testing in Cocoa has traditionally been a dif- 
ficult task, with little to no benefit. The built-in tools 
and framework Apple provides aren't as helpful as 
they should be, so we'll talk about some unit testing 
tools and methodologies that don't suck. Get unit 
tests integrated and running against your existing 
iPhone, iPad and Cocoa-based apps, and see how to 
get the most out of your testing by using processes 
you've seen in other development environments. 

Building an iPhone Publishing 

House 

By Michel Kripalani 

Learn about the ins and outs of the iPhone app 
development process and how to build a premiere 
publishing brand in less than one and a half years. 
This session is presented as a case study by Ocean- 
house Media, which has over 85 apps in the App 
Store. They have major licenses in place with Dr. 
Seuss, Hay House Publishing and others, and have 
had numerous apps reach the Top 10 and Top 100 
paid charts. On average, their apps are rated 4.5 out of 
5.0 stars across the board. 

You'll learn: 

• How the App Store model compares to the 
traditional video-game model 

• How to secure a major license deal, such as with 
Dr. Seuss and Hay House 

• How many apps you need to have a sustainable 
business on the App Store 

• Which marketing strategies work — and which 
do not 

• The importance of ratings — and how to 
improve them 

• What is the relationship between pricing and 
sales volume? Pricing and ratings? 

• What software tools are the most important for 
iPhone publishers? 

The talk will be inspirational, motivational and 
loaded with take-away items. 
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800 CLASSES » 3:00 - 4:1 5 pm 

Advanced Core Data: Importing 

and Exporting Data Efficiently 
By Marcus Zarra 

In this session, we will be discussing the 
impacts of importing and exporting on iPhone 
usability. Specifically, we will review the issues 
with single threaded vs. multi-threaded importing 
and exporting. 

We will review the best practices of importing 
data into a Core Data store using Cocoa Touch while 
maintaining a balance between user experience 
and performance. 

We will also review how to handle an export from 
Core Data using Cocoa Touch and multithreading. 

Finally we will review some performance tips, 
tricks and traps to be aware of while developing a 
Core Data application for Cocoa Touch. 

Mastering the External Accessory 

Framework 
By Michael Gile 

You can interface your apps directly to custom 
hardware devices via the External Accessory Frame- 



work. In this session, you will receive an overview of 
the Made for iPhone/iPod licensing program, what 
it means to build and ship an authorized Apple 
accessory (within Apple NDA limits), and a live 
demonstration of a custom car diagnostic device 
designed to allow your iPhone to talk directly to 
your car's On-Board Diagnostics (OBD-2) port. 

This demonstration will walk you through a 
sample Xcode project to illustrate the use of the 
External Accessory Framework, and will show how 
to setup and communicate with the diagnostic 
accessory device connected via the 30-pin iPhone 
dock connector. 

Developing Effective Enterprise 

Smartphone Apps 
By Adam Blum 

Driven by the phenomenal success of the 
iPhone and the App Store, smartphone app usage is 
finally taking off in the enterprise. Yet many devel- 
opers are still uncertain about how to create a great 
user experience for information-intensive business 
apps on smartphones. 

In this session, you'll learn the general principles 
of creating compelling smartphone apps for busi- 



nesses, and what the key differentiators are between 
business and consumer apps. For each principle, we 
will show flagrant violations from existing apps on 
the iPhone App Store as well as apps that follow the 
proper guidelines, creating an optimal user experi- 
ence. Come away knowing how to create an app 
that follows best practices and guidelines, driving 
user adoption and customer satisfaction. 

Creating an Easy-To-Use 

Objective-C Modular Framework 
By Lee Barney 

The Model-View-Control pattern as implement- 
ed by Apple is great as far as it goes. It does tend to 
lead to implementation code being scattered 
across many areas of your application. 

This class helps you design and implement a 
modular, reusable framework that can speed up 
you application development dramatically. Initial 
data indicates you could reduce your time to mar- 
ket by a factor or 10 or more by reusing the frame- 
work you will create in this class. 

You will create a command-response, highly 
modular framework that you can reuse in every 
iPhone, iPad and even Mac application you ever cre- 
ate. Your framework will be fast. It will be small. It 
will even be easy to use! 



Speaker Bios 




Chris Bannon is familiar with 
many acronyms: UX, ASP.NET, AJAX, 
C#, SQL and jQuery. As the Lead 
Web Developer at ComponentOne, 
he has mastered techniques such as 
CSS layout, unobtrusive JavaScript, 
semantic markup and progressive enhancement. 
Chris currently manages ComponentOne's Dev 
Tools for ASP.NET and iPhone Web development. He 
spends most of his time building or using the Web 
and traveling to share his passion with others. Chris 
has been a speaker at the Microsoft campus, 
DevConnections and at various Code Camps in 
South Florida, Philadelphia and Pittsburgh. 

Lee S. Barney is the creator of the 
QuickConnectFamily framework for 
JavaScript-based cross-platform 
hybrid applications and a professor 
in the Computer Information Tech- 
nology Department at Brigham 
Young University, Idaho. He served as CIO/CTO of 
@HomeS oft ware, a company that produced Web- 
based, mobile data and scheduling applications for 
the home health care industry. He is the author of 
Developing Hybrid Applications for the iPhone. 





Jeff Biggus is the founder of 
HyperJeff, Inc. and cofounder of Big 
Stone Phone, producing Unix, Mac, 
iPhone and iPad apps, and custom 
in-house software for companies 
specializing in physics and math 
software. He has been an independent program- 
ming consultant for more than 1 5 years. Jeff created 
the HyperJeff Network in 1994, a site serving the 
Mac OS X community since Rhapsody. The site 
serves up an ad-free list of Mac apps and the largest 
database of Cocoa articles on the Web. Current hob- 
bies include mathematical physics, an original Web 
framework system, and experiments in Web serving. 

Jonathan Blocksom is an inde- 
pendent software developer spe- 
cializing in 3D graphics, and is the 
author of the award winning Gol- 
lyGee Blocks, a 3D modeler for chil- 
dren. Jonathan has worked with 
OpenGL since it was just gl and is currently 
employed by Google in Washington, DC. 





Adam Blum is CEO of Rhomobile. 
Formerly the Senior Director of 
Engineering at Good Technology, he 
led the Server Engineering efforts, 
including the development of 
GoodAccess, the first offline and 
asynchronous-oriented Web browser for mobile 
devices. Adam's experience at Good Technology 
demonstrated to him the need for a framework that 
would help enterprises build mobile applications 
easily and cost-effectively, without having to devel- 
op applications from scratch for multiple platforms. 

Nitin Chitkara is the Vice Presi- 
dent of Business Development at 
Mobclix, where he is responsible for 
the company's publisher and devel- 
oper relationships. Nitin has exten- 
sive experience in mobile applica- 
tion development, design and marketing. He was a 
senior member of Moviso's BREW development 
team. Prior to Mobclix, Nitin was a senior manager 
in PayPal's user experience group, where his pri- 
mary focus involved market assessment, usability 
optimization and market-entry strategy. 
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Bobby Emamian is the cofounder 
and CEO at Prolific Interactive, a 
new-media agency specializing in all 
things digital. With a tech and social 
media background, he has propelled 
his company into working with big 
brands looking to maximize their digital presence. 
Bobby has made several appearances on panels in 
Connecticut speaking about the power of social 
media. Having worked on social media sentiment 
analysis software in the past, Bobby understands 
and utilizes social media for his company and 
clients. Bobby is also the founder of New Media 
Haven. 

Nathan Eror is living the dream as 
the founder of iPhone and iPad 
I game studio Free Time Studios. He 
has been building iPhone apps since 
the initial release of the SDK, and is a 
regular speaker at iPhone developer 
conferences in the U.S. and Europe. He lives in Hous- 
ton, where he is the co-organizer of the iPhone 
Developer Meetup group and iPhoneDevCamp 
Houston. Nathan is also very active in the local soft- 
ware development community and the high-tech 
startup scene. 

Aaron Farnham has been devel- 
oping software for 16 years for fun 
and professionally for the last 10 
years. He began his career with Boe- 
ing learning everything he could 
about the International Space Sta- 
tion before moving into a position writing software 
for the space-station thermal systems. In 2008, 
when looking for a complete career change out of 
the space industry, Aaron discovered iPhone devel- 
opment. Shortly thereafter he started an iPhone 
consulting company, Phodder, which he left recent- 
ly to join FuzzyLuke in making your iPhone talk to 
your car. In his free time, he plays ultimate Frisbee, 
drinks coffee and argues about the best TexMex 
places in Texas. 

Noah Gift is the coauthor of 
"Python For Unix and Linux System 
Administration" by O'Reilly. He is 
an author, speaker, consultant and 
community leader, writing for pub- 
lications such as IBM Develop- 
erWorks, Red Hat Magazine, O'Reilly, MacTech and 
Manning. His consulting company, Giftcs, provides 
solutions for Python development and systems 
engineering. Noah is currently coauthoring a book 
on Google App Engine and writing a large Google 
App Engine exercise- and nutrition-tracking appli- 
cation. Most recently, he worked as a Python pro- 
grammer for Weta Digital in New Zealand, which 
has one of the world's largest render farms. Noah is 
also the former organizer for PyAtl, which is the 







Python User Group for Atlanta. He has given pre- 
sentations at PyCon and PyAtl. 

Michael Gile is founder of 
I FuzzyLuke, a Houston startup build- 
ing mobile automotive diagnostic 
solutions, including the FUZZYCar 
iPhone application. Michael has 
f& been a software and security engi- 
neer for over 10 years, working mostly in startups 
and small companies. Prior to founding FuzzyLuke, 
Michael worked extensively in mobile, Web and 
embedded software development. 

Danny Goodman is the author of 
45 books (and counting) on com- 
puting and Internet technologies. In 
the community of World Wide Web 
developers, he is well known for 
numerous bestselling book titles, 
including "JavaScript Bible" (Wiley), "Dynamic HTML: 
The Definitive Reference" (O'Reilly) and JavaScript & 
DHTML Cookbook" (O'Reilly). Danny's nearly 30- 
year writing career has generated many successful 
book and software-development projects covering 
popular client-side scripting languages (HyperTalk, 
AppleScript and JavaScript). During this time, 
Danny has been a speaker and instructor at numer- 
ous conferences in North America, Europe, Asia and 
Australia. He began his transformation from scripter 
to native app developer in 2008, and has published 
iPhone SDK apps for the News, Utilities and Photog- 
raphy categories in the Apple App Store. 

Jeff Haynie is cofounder and CEO 
of Appcelerator. Jeff is a long-time 
serial entrepreneur, technologist 
■ and blogger. Previously, Jeff was 
3 cofounder and CTO of Vocalocity, a 
^d \ hbmP* software provider in the communi- 
cations arena, and before that, CTO of eHatchery, a 
digital incubator and offshoot of Bill Gross' idealab. 
Jeff has worked on numerous standard committees 
such as IETF and W3C, as well as being a core con- 
tributor to a number of important open-source 
technologies such as JBoss and OpenVXI. Jeff 
served with distinction in the U.S. Navy. 

Aaron Hillegass is the CEO of Big 

Nerd Ranch, which he founded in 
2001. He started programming at 
the age of 1 in the basement of the 
Oregon Museum of Science and 
Industry. He was a a developer train- 
er at NeXT in 1995-1997. NeXT was bought by 
Apple, so he left in June of 1997 to create 
ClassMAX.com, the search engine for classes and 
seminars. After leaving ClassMAX during the late 
1990s, Aaron went on to become one of the best 
WebObjects programmers on the planet; he was 
especially known for his skill deploying WebObjects 






applications. In 2000 Aaron was asked to teach 
Apple engineers how to write apps for Mac OS X. 

In 2007, MacTech named Aaron one of the top 
25 most influential people in the Mac community. 
An accomplished speaker, Aaron has lectured at 
Apple's Worldwide Developer Conference (WWDC), 
ApacheCon, and C4. He also gave the keynote at the 
"Voices That Matter" iPhone Developers Conference 
in 2009. 

Aaron is also a best selling author. "Cocoa Pro- 
gramming for Mac OS X"was published in December 
of 2001. "Cocoa Programming," now in its third edi- 
tion, is widely considered the Bible in the industry. He 
is also the co-author of "Core Mac OS X Program- 
ming," which was later renamed "Advanced Mac OS 
Programming." 

Michel Kripalani is President of 
Oceanhouse Media, publisher of 
mobile apps that uplift, educate 
and inspire. Oceanhouse Media is a 
major player in the iPhone and iPad 
space with an offering of over 85 
apps, numerous bestsellers and proprietary tech- 
nology. Licensing relationships are in place with Dr. 
Seuss Enterprises, Hay House Publishers and others. 
A veteran of the video-game industry, Michel 
founded Presto Studios in 1991. Presto Studios had 
numerous hits including The Journeyman Project 
series, Myst 3: Exile and more. Michel was also Direc- 
tor of Business Development at Autodesk for many 
years, where he spent a large portion of his time 
managing relationships with Microsoft, Sony, Nin- 
tendo and independent game development stu- 
dios worldwide. 

Mike Lee, the world's toughest 
programmer, is the founder and 
CEO of United Lemur, a philan- 
thropic revolution disguised as a 
software company. Mike also 
cofounded Tapulous, whose titles 
include Tap Tap Revenge and Twinkle. Prior to 
iPhone, Mike cut his teeth and won an Apple Design 
Award at Seattle-based Delicious Monster Software. 
Mike is originally from Honolulu, is a popular blog- 
ger and occasional pundit, and has been seen on 
twitter as bmf. His last known day job was as a 
Senior Engineer at a very large company in Cuperti- 
no marketing magical products. 
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Griffin McGrath is a researcher 
who specializes in entrepreneurship 
and innovation research and prac- 
tice. He is focused on revolutionizing 
online higher education as well as 
the pursuit of excellence in entrepre- 
neurship. Griffin specializes in creat- 
ing strong business plans and innovative venture 
ideas that will solve problems and fill specific nich- 
es in many markets, including social networking, 
mobile applications and higher education. Griffin is 
no stranger to strategic management and innova- 
tion. He spent four years as a student of entrepre- 
neurship and as a competitor in business-plan 
competitions on the state level, with several win- 
ning ventures. Griffin leverages these successes 
and coaches undergraduates participating in colle- 
giate business-plan competitions. 

Saul Mora has coded in several 
languages prior to arriving in Objec- 
tive-C. He has a background in C#, 
Java and Ruby. He is also the Found- 
H^ ing Panda at iPhone Development 
^P firm Magical Panda Software, work- 
ing on custom iPhone development consulting 
projects. 

Joe Pezzillo is the cofounder of 
Push 10 LLC and the founder of 
Metafy LLC, a Boulder, Colo.-based 
software boutique currently devel- 
oping a suite of prototype iPhone 
applications for a Fortune 1 00 finan- 
cial services company. In addition to pioneering 
work in Internet radio and managing several start- 
ups, Joe spent three years as a researcher at the 
Apple Electronic Media Lab in the mid 90s. 

E Jonathan Saggau is the founder 
and CEO of Sounds Broken Inc., a 
growing Mac OS X and iPhone soft- 
ware contracting shop as well as a 
technical and business process con- 
sultancy. When he's not flying air- 
planes or reverse-engineering hardware and soft- 
ware, he works with clients such as Fileblaze, top- 
sOrtho, Vertitron, Equity Audio and the Big Nerd 
Ranch to develop outstanding products, services 
and processes. Jonathan he has written on software 
development for Apress and IBM DeveloperWorks. 
He holds Bachelor's and Master's degrees in Music 
Composition. He blogs at jonathansaggau.com/ 
blog and can be followed on twitter @jonmarimba. 



Ben Scheirman is a developer 
from Houston. As Director of Devel- 
opment at ChaiONE, Ben oversees 
development of iPhone projects as 
well as Web applications in Ruby on 
Rails and .NET. Ben is a Microsoft 
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MVP, ASP Insider and Certified ScrumMaster. Ben 
has spoken at numerous user groups and confer- 
ences for .NET and Ruby, and has coauthored two 
books for ASP.NET MVC. His first iPhone application 
was featured in the New & Noteworthy section of 
the iTunes App Store, and he has been enjoying 
iPhone programming ever since. You can find Ben 
online at his blog (flux88.com) or on Twitter (twit- 
ter.com/subdigital). 

Michael Schneider left Silicon 
Valley technology law firm Wilson 
Sonsini Goodrich & Rosati at the 
beginning of 2009 to found 
HiveBrain Software. HiveBrain pub- 
lishes a variety of applications on 
the iTunes App Store, the most notable of which, 
TouchType, peaked at #13 in the U.S. App Store. 
HiveBrain most recently has been focused on the 
Andrew Johnson series of self-help applications, 
which are published in a variety of categories on 
the iPhone and Android app stores. 

Michael continues to practice law under the 
name Bitwise Legal, focusing on software and inter- 
active media clients. He is also co-author of the 
book The Business of iPhone App Development: 
Making and Marketing Apps that Succeed, pub- 
lished by Apress. 

Daniel Steinberg has spent the 
last three decades programming the 
iPad. OK, he hasn't. But he's been 
programming the iPhone and the 
iPad since the SDK's first appeared in 
beta and is co-author of the book 
"iPad Programming" from the Pragmatic Program- 
mers and author of their book "Cocoa Program- 
ming". Daniel presents iPhone and Cocoa training 
for the Pragmatic Studio and consults through his 
company Dim Sum Thinking. When he's not coding 
or talking about coding for the Mac, the iPhone, and 
the iPad he's probably cooking or hanging out with 
his wife and daughter. 





Robert Strojan is the founder and 
lead iPhone developer at Blackout 
Labs. He has developed multiple 
applications appearing in theTop 20 
Paid Music charts, and his apps have 
been featured in prominent media 
outlets like BET and the ChicagoTribune. Robert has 
also consulted major pro audio manufacturers 
regarding their iPhone product lines, and published 
articles in iPhone Life Magazine and Mobile 
Orchard. 

Marcus Zarra is the owner of 
Zarra Studios, where he builds Mac, 
iPhone and iPad software for a wide 
variety of clients and customers. 
Outside of Apple, there are very few 
people with a better understanding 
of Core Data than Marcus. He has not only written 
the book on Core Data, he has also been doing 
iPhone, and now iPad, development as long as it 
has been possible to do so, and Mac programming 
for longer than that. With Matt Long, Marcus is the 
coauthor of the popular programming blog Cocoa 
Is My Girlfriend. Marcus and Matt also wrote "Core 
Animation: Simplified Animation Techniques for 
Mac and iPhone Development" (Addison-Wesley). 
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Gottd Get Approval??? Try These Time-Honored Tactics! 



1. STUDY. Note the classes and workshops at 
IPhone/iPad DevCon focused in four main areas: 
development essentials, adopting applications 
for the iPad, linking iPhone/iPad apps to enter- 
prise systems, and marketing your apps more 
effectively through the App Store. 

2. PREPARE. Go in armed with all the neces- 
sary materials to make a good case. Download 
the course catalog and circle the classes you 
want to take, and explain why the topics relate to 
your iPhone and iPad development efforts. 




3. TEACH. Promise to come back from 
IPhone/iPad DevCon and hold a brown-bag 
lunch session to share what you've learned with 
your colleagues. 

4. EXPLAIN. The iPhone/iPad market is RED 
HOT and your company will be rewarded by not 
waiting around — get going on those mobile 
apps today! 

5. SAVE. The sooner you register, the more you 
save, so explain the benefit of signing up early. 

6. TEAM. Save even more with group dis- 
counts. Send 3 or more employees from your 
company, and save $100 off per person. Each 
person can take different classes and bring back 
even more valuable tips and techniques. 



7. CHOOSE. There are 4-6 classes or work- 
shops offered in each time slot. That means that 
you'll always find something that fits your needs 
and is at just the right level for your own iPhone 
development knowledge and requirements. 

8. MEET. Seize the opportunity to work with 
iPhone experts — experts who have real-world 
experience. 

9. DECIDE. While you can sign up anytime, 
your company will save the most if you beat the 
extreme Early Bird, Super Early Bird and Early 
Bird deadlines. Help your company's bottom line 
by signing up today! 



Hotel and Travel Information 



Hyatt Regency La Jolla at Aventine 

3777 La Jolla Village Drive, 
San Diego, California, USA 92122 
Tel: +1.858.552.1234 
Fax: +1.858.552.6066 

Reservations 

Discounted room rates for iPhone/iPad DevCon 
attendees are US$139 per night for single/double 
occupancy. This rate is available from September 
26, 2010 (check-in) through September 29, 2010 
(check-out). 

Reservations must be made by 

September 14,2010 
to receive the discounted rate. 

For those who reserve their hotel rooms from our 
room block online at 
www.iphonedevcon.com/hoteltravel.html, 

they will receive: 

• Complimentary wireless internet service 
in their rooms. 

• Discounted self-parking reduced to $15.00 per day. 




Hotel Highlights 



Located in the city known as "The Jewel of the Pacif- 
ic", our stunning La Jolla hotel offers incomparable 
beaches, shopping, dining, galleries and attractions. 
Visit Stephen Birch Aquarium & Museum, spend a 
day kayaking, take a Baja Lobster or Wine tour, see 
live theater or shop San Diego's trendy boutiques; 
all just minutes away. 

Set on 1 1 prime acres, our convenient La Jolla 
California hotel boasts 41 9 guestrooms, a 32,000 sq. 
ft. Sports Club and spa, gourmet restaurant row, 
and 32,000 sq. ft. of function space. Be our guest, 
and enjoy the abundant riches of San Diego's "Gold- 
en Triangle" at our luxury hotel in La Jolla, California. 



Transportation 

Airport: 

• San Diego International Airport/Lindberg Field 

Express Shuttle or Cloud 9 Shuttles: 

• Cost: Approx $15.00 one way per person (subject 
to change) 

• Seating/Luggage: 2 pieces of luggage per person 

• Outside of Baggage claim area 

Taxi: 

• Cost: Approx $35-45 

• Seating/Luggage: 2 pieces of luggage per person 

• Pick Up: Outside of Baggage claim area 
Maximum seating: 

• Shuttles seat 10 people, taxi 2-8 people 

Driving Directions 

From San Diego Int'l Airport (10 miles): Turn left on 
Harbor Drive, then left again on Laurel. Follow signs 
to I-5 North. Exit at La Jolla Village Drive and turn 
right. Turn right again at Lebon. Turn right on 
University Center Lane. 



1 2 • Sept. 27-29, 201 • Hyatt Regency Aventine • San Diego, Calif. • wvv.iphonedevcon.com 



iPhone/iPad 
DevCon 2010 



Pricing and Registration RegisterOnlineatwww.iphonedevcon.com 



Register By 



extreme Early 
Bird Rate 


Super Early 
Bird Rate 


Early Bird 
Rate 


Bird 
Rate 


Full 
Price 


Fri.June 18 


Fri.July30 


Fri., Aug. 27 


Fri., Sept. 1 7 


After Sept. 1 7 



Three-Day Full Event Passport 

Spetember 27-29, 2010 




$845 
BEST VALUE! 


$945 


$995 


$1,065 


$1395 


Two-Day Technical Conference 

Spetember 28-29, 2010 


Only 


$725 


$795 


$825 


$895 


$1,195 


One-Day Workshops Only 

Spetember 27, 2010 




$595 


$675 


$725 


$785 


$895 


Exhibit Hall Only 

Spetember 28, 2010 




$50 


$50 


$50 


$50 


$50 

All fees are in US$. 



Three-Day Full Event Passport 
Registration Includes: 

• Admission to workshops and technical classes 

• Admission to keynotes 

• Admission to Exhibit Hall 

• Admission to all special events, including the 
Attendee Reception 

• Downloadable conference materials 

• Continental breakfast, coffee breaks, and lunch 
where indicated 

Two-Day Technical Conference Only 
Registration Includes: 

• Admission to technical classes 

• Admission to keynotes 

• Admission to Exhibit Hall 

• Admission to special events on September 28-29, 
including the Attendee Reception 

• Downloadable conference materials 

• Continental breakfast, coffee breaks, and lunch 
where indicated 

One-Day Workshops Only 
Registration Includes: 

• Admission to workshops 

• Admission to special events on September 27 

• Downloadable conference materials 

• Continental breakfast, coffee breaks, and lunch 
where indicated 

Exhibit Hall Only Registration 
Includes: 

• Admission to Exhibit Hall 

• Admission to Attendee Reception 




HOW TO REGISTER 

Register online and use one of the following pay- 
ment methods: 

Credit Card. You can use the secure online form to 
pay via credit card and get immediate confirma- 
tion of your registration. MasterCard, Visa and 
American Express are accepted. You'll receive a 
REGISTRATION RECORD and RECEIPT. Please print 
out these pages and bring them with you to the 
Conference. Present them at the Registration Desk 
to pick up your badge and course materials. 

Check. Fill out the online registration form. Print 
out the REGISTRATION RECORD and RECEIPT and 
mail to BZ Media LLC, 7 High Street, Suite 407, 
Huntington, NY 1 1743, with your payment. Online 
registrations that are mailed without payment will 
not be confirmed until payment is received. 

Purchase Order. If you register using a P.O., you'll 
be invoiced immediately for the registration 
amount. Payment must be received before your 
registration can be confirmed. 

SPECIAL DISCOUNTS 

You may combine one of these special discounts 
with the Early Registration pricing to save even 
more! 

Group. Get an additional $100 off per person if you 
register 3 or more people from one company for 
the Full Event Passport. Use the "Add another per- 
son" option during the online registration process. 

Government. Federal, State and Local Government 
employees can receive an additional $100 off 
the Full Event Passport price. Enter code GOV in 
discount code field. 



Educational Institutions. Personnel employed by or 
attending educational institutions can get a $100 
discount off the Full Event Passport price by using 
the code EDU. 

User Groups. Contact Ted Bahr, ted@bzmedia.com 
to see if your group is eligible for a discount. 

Non-Profit Organizations. Personnel employed by 
non-profit organizations can get a $100 discount 
off the Full Event Passport price by using the code 
NONPROFIT. 

CANCELLATION AND REFUND POLICY 

You can receive a full refund, less a $150 registra- 
tion fee, for cancellations made by Friday, August 
20, 2010. Cancellations after this date are non- 
refundable. Send your cancellation in writing to 
sadler@bzmedia.com. Registrations may be trans- 
ferred to another person. 

PRESS PASSES 

BZ Media welcomes qualified members of the 
press and technology analysts community to its 
events. Click here to review our press pass policy. 
To register as press, sign up online and choose 
"Press" under "Registration Type". 

QUESTIONS 

Contact Stacy Burris, Event Director at 
sburris@bzmedia.com or +1-631-421-41 58 x1 08. 
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